Anti Money Laundering Blog | Resources | SmartSearch

Why 2026 is the year Source of Funds became a regulator's central control, and what firms need to do about it

Written by SmartSearch | Aug 18, 2026, 9:17:57 AM

For most of the last decade, Source of Funds compliance has sat quietly inside the wider AML framework. It was a required check on higher-value transactions, treated by many firms as an operational box to tick rather than a critical part of their risk management. That framing has now shifted, and 2026 has confirmed the direction of travel. Source of Funds is now a central regulatory control across most of the regulated financial activity in the UK.

Four separate developments have driven that shift, and each points in the same direction.

One: The SRA has moved source of funds to the centre of the compliance conversation

In August 2026, the Solicitors Regulation Authority published its updated Sectoral Risk Assessment on AML, terrorist financing, proliferation financing and sanctions. In the update, the sources of funds and wealth were identified as "a key control which is relevant across several high-risk areas." That is a specific and consequential shift. The SRA is no longer treating source of funds as a discrete check on individual transactions. It is treating it as a control that runs across the life of a client relationship and across multiple types of regulated activity.

For legal firms in particular, the message is clear. Firms are expected to be able to evidence, at any point, where their client's money has come from and whether it remains available. Firms that treat this as an occasional exercise will find themselves out of step with what the regulator now expects.

Two: The Failure to Prevent Fraud offence is coming, and it changes corporate liability

From 2027, the Failure to Prevent Fraud offence under the Economic Crime and Corporate Transparency Act 2023 begins enforcement. It introduces corporate criminal liability for organisations that cannot demonstrate they took reasonable steps to prevent fraud. That is a genuinely different accountability model from what has come before, and it applies to a wide range of regulated firms.

Under the new offence, "we didn't know" is no longer a defensible position. Firms must be able to show what they did to prevent fraud, and evidence it. Source of Funds documentation, when captured through a structured audit-ready process, is exactly the kind of evidence firms will need. The alternative, of trying to reconstruct a compliance position from fragmented emails and manual records after the fact, is not a position any general counsel will want to be in.

Three: Consumer expectations have caught up with regulation

Recent research from Credas, based on a survey of 1,000 UK homebuyers, found that 39% cite proof of funds as their single most frustrating compliance task, ahead of every other category. Almost seven in ten (69%) said they would stop working with a firm found in breach of compliance regulations, with a further 27.5% saying they would consider it. 80.9% cite regulation as the single biggest factor that makes them trust a business with their personal data.

This is a genuinely important cultural shift. Consumers are no longer treating compliance as an inconvenient regulatory formality. They are actively pulling firms toward higher standards. Firms that can demonstrate a rigorous, structured, transparent source of funds process are meeting a customer expectation as well as a regulatory one. Firms that cannot are increasingly likely to lose the customer alongside the regulator.

Four: The infrastructure to do it well now exists

The technical picture has also changed materially. Open Banking, once a niche innovation, is now used by more than 19 million people and businesses in the UK by May 2026, close to one in three UK adults. Consumer familiarity with sharing financial data through regulated channels is at an all-time high. What was once a barrier to adoption for source of funds tools has become a routine part of everyday financial life.

That familiarity, combined with the growing infrastructure of Digital Identity and Attributes Trust Framework (DIATF) certified providers, means firms now have the operational tools to do source of funds well. The question is no longer whether it can be done efficiently. It is whether firms are choosing to.

 

 

The picture the platform data confirms

SmartSearch's own platform data reinforces every one of the four shifts above. Source of Funds check volumes across the platform grew tenfold in the first half of 2026 alone, driven overwhelmingly by residential property transactions but with growing volumes across wealth, investment and lending. That is not a temporary spike responding to a single enforcement moment. It is the sector responding to a fundamentally different operating environment.

What forward-thinking firms are doing

The firms getting ahead of this shift are doing three things.

One, they are building a source of funds into their standard onboarding workflow rather than treating it as an exceptional check. That is what the SRA's updated Assessment envisages, and it is what the Failure to Prevent Fraud offence will effectively require by 2027.

Two, they are choosing certified, structured, audit-ready tools over manual document collection. A source of funds process built around scanned bank statements arriving in fragmented emails is not going to meet the standard the current regulatory environment expects.

Three, they are looking at source of funds as a customer experience question as well as a compliance question. The 39% homebuyer frustration figure is not going away. Firms that can turn the most frustrating part of the process into a smooth, transparent, five-minute journey are winning trust as well as ticking a compliance box.

Where SmartSearch fits

The updated SmartSearch Source of Funds product has been designed for the environment described above. Structured journeys for every regulated transaction. Open Banking integration through FCA-authorised Armalytix. Questionnaire content endorsed by Legal Eye. Configurable per firm, per journey, per transaction type. Ready for the compliance environment that already exists, and the one that is arriving.