Regulatory context

Control expectations and enforcement

Explore enforcement lessons, the EU AML framework and the assessment controls ComplyBase supports.

Lessons from enforcement

Control gaps have real consequences.

Selected FCA cases illustrate why the quality of the onboarding process matters. Amounts below are rounded.

FCA · 12 DECEMBER 2025
£44.1m

Nationwide

The FCA found ineffective systems for keeping customer due diligence and risk assessments current, alongside transaction-monitoring weaknesses.

Read the FCA notice ↗
FCA · 8 JULY 2025
£21.1m

Monzo

The FCA identified inadequate onboarding, customer risk assessment and transaction-monitoring systems, plus breaches of restrictions on high-risk onboarding.

Read the FCA notice ↗
FCA · 2 OCTOBER 2024
£29.0m

Starling Bank

The FCA identified sanctions-screening failings and breaches of restrictions on opening accounts for high-risk customers.

Read the FCA notice ↗
Bring the lesson into the workflow.

ComplyBase connects documented risk assessment, screening dispositions and authorised sign-off with records your team can retrieve and export.

See the supporting controls ↗

These cases concerned wider control frameworks. They are not ComplyBase customers or evidence that any one product would have prevented the failings. ComplyBase does not currently provide transaction monitoring.

AMLA & the EU single rulebook

Prepare the process, as well as the policy.

The EU framework strengthens consistency in AML supervision and due diligence. ComplyBase supports documented assessment and review practices; firms must determine the requirements applicable to their own business.

2025

Operations begin

AMLA begins operations and work on implementing measures.

2026

Preparation continues

The authority develops its capacity and tests risk assessment models.

2027

Rulebook & selection

The AML Regulation generally applies from 10 July. Selection for direct supervision takes place.

2028

Direct supervision

AMLA begins direct supervision of the selected institutions.

AMLA’s initial selection is up to 40 entities. Direct supervision is targeted; it does not mean every financial firm becomes directly supervised by AMLA. UK requirements remain a distinct framework.

Sources: AMLA timeline · AMLA risk assessment exercise · EUR-Lex: AML Regulation

From regulatory principles to daily work

How ComplyBase helps reduce operational gaps.

Our product mapping below describes practical support, not regulatory certification or a guarantee against fines.

Control objective ComplyBase support Your firm’s responsibility
Consistent assessment Documented factors, weighted results and material-risk overrides. Approve the methodology and assess whether it fits the business.
Ownership context Capture beneficial owners, controlling parties and jurisdictions. Verify identity and ownership with appropriate evidence.
Screening review Record potential matches, dispositions and analyst rationale. Review matches promptly and take required action.
Accountability Role-based approval and recorded decision history. Assign reviewers and maintain effective governance.
Evidence for review Retrieve assessments and export reports. Ensure records are complete and meet applicable retention requirements.

Regulatory sources checked 13 September 2026. ComplyBase is not affiliated with or certified by AMLA, the FCA or another regulator.

See ComplyBase in practice

See ComplyBase in practice

A focused conversation about your onboarding process, the decisions you make and the records you need.

Book a demo