The era of the "friendly regulator" is officially drawing to a close.
For decades, UK accountancy firms have operated under the anti-money laundering (AML) supervision of their professional bodies—organisations that naturally balance the role of regulator with that of a membership support network. That dynamic is about to change permanently.
Following a consultation process, HM Treasury has confirmed its decision to strip the 22 Professional Body Supervisors (PBSs) of their AML oversight powers. In a move that fundamentally redraws the regulatory map, the Financial Conduct Authority (FCA) will assume the role of the single statutory supervisor for all professional services firms. This consolidation will see the FCA replace bodies like the ICAEW and ACCA, while also taking over the statutory supervisory responsibilities currently held by HMRC for accountancy service providers and trust and company service providers (TCSPs).
This is not merely an administrative shuffle; it represents a seismic shift in regulatory philosophy. The move from a fragmented, often guidance-based regime to a centralised, evidence-led enforcer will expose thousands of firms to a level of scrutiny many are ill-prepared to handle.
The Reform: A Single Statutory Supervisor
According to a recent analysis by IQ-EQ, the Treasury’s decision stems from long-standing criticisms of the UK’s "patchwork" supervisory model. The Financial Action Task Force (FATF) and the Treasury’s own reviews have consistently flagged inconsistent risk-based supervision across the various supervisors as a systemic vulnerability.
Key details of the reform include:
- The New Supervisor: The FCA will take over AML/CTF supervision for all in-scope firms. This removes the responsibility from the 22 PBSs and transfers the supervisory remit for relevant firms from HMRC to the FCA.
- The Timeline: The Treasury published its consultation paper on the reform's duties and powers in November 2025. Based on current projections, full implementation is expected by 2028/29 to allow for a necessary legislative and transition period.
- The Scope: The reform affects all firms currently subject to the Money Laundering Regulations (MLR), including accountants, tax advisers, insolvency practitioners, and TCSPs, regardless of their size.
The Context: Why the System is Breaking
The driver for this overhaul is a loss of confidence in the effectiveness of the current "patchwork" system. Regulators and international bodies have argued that having 22 different professional bodies—plus HMRC—supervising AML compliance has led to inconsistent standards and weak enforcement.
The Treasury's review highlighted that the "light-touch" approach favoured by some supervisors has resulted in firms failing to treat AML as a core business risk. Instead of rigorous governance, many firms have relied on principles-based oversight that lacks the bite of statutory enforcement.
Specific vulnerabilities identified include:
- Inadequate Client Due Diligence (CDD): Files often lack the necessary depth to prove a client's legitimacy.
- Weak Internal Controls: Policies are frequently generic rather than tailored to the firm's specific risks.
- Offshore Opacity: For TCSPs, complex offshore structures with obscure beneficial ownerships have created gaps easily exploited by bad actors.
The "So What": Why This Matters for Your Firm
The implications of an FCA takeover cannot be overstated. Unlike professional bodies, which often view compliance through an educational lens, the FCA is a conduct regulator with a formidable enforcement toolkit.
The regulator has already signalled that current compliance rates are unacceptable. Data cited by IQ-EQ reveals a stark reality: in 2025, only 19% of accounting firms supervised by the ICAEW were found to be fully compliant with expected AML/CTF controls. The legal sector fared even worse, with only 13% of firms supervised by the SRA meeting the standard.
Under an FCA regime, the non-compliant majority are effectively sitting ducks. We can expect the FCA to deploy the same data-driven, intrusive supervisory methods it uses in the financial services sector. This means:
- Evidence Over Assurance: The days of relying on a "good reputation" or verbal assurances are over. If it isn't documented, it didn't happen.
- Aggressive Enforcement: The FCA has the power to impose substantial civil penalties, public censures, suspensions, prohibitions, and even initiate criminal proceedings for breaches of the Money Laundering Regulations 2017.
- Proactive Monitoring: Expect a shift from reactive desk-based reviews to proactive, data-led interventions and on-site inspections focused on high-risk areas.
The "Now What": Your Action Plan
Waiting for the 2028 implementation date is a strategic error. The gap between current market practice and FCA expectations is significant, and closing it will require a fundamental re-engineering of your internal controls.
To prepare your firm for this tougher regime, focus on these five priority areas:
Rigorous Client Due Diligence (CDD) Review your CDD files now. The FCA will expect granular detail on the nature of business relationships, not just identity verification. Ensure you have verifiable evidence of source of funds and wealth, particularly for high-risk clients. The reliance on "client assurances" must be replaced by robust, independent checks.
Data-Driven Risk Assessments Generic templates will no longer suffice. Your Firm-Wide Risk Assessment (FWRA) must be a living document, updated regularly with real data reflecting your specific client base, service lines, and geographic exposure. It must demonstrate that you understand your specific financial crime risks.
Validate Your "BOOMs" Under the new regime, the scrutiny on Beneficial Owners, Officers, and Managers (BOOMs) will intensify. Ensure all key personnel have undergone rigorous competence and probity checks that are fully documented. The FCA will evaluate the compliance history and risk profiles of these individuals under MLR 2017 rules.
Update Policies and Procedures Dust off your AML policy manual. If it hasn't been updated in the last 12 months, it is likely out of date. Internal processes, controls, and procedures must be documented in detail, with compliance records readily available for auditing purposes.
Audit Your Audit Trail The FCA’s supervision is evidence-based. Test your systems: can you produce an immediate, unalterable audit trail of a decision made three years ago regarding a high-risk client? If not, your system is not FCA-ready.
Bridging the Compliance Gap
The transition to FCA supervision is the most significant regulatory change for the accountancy profession in a generation. It demands a shift in mindset from "compliance as a checklist" to "compliance as a core business function."
Firms that adapt early can turn this obligation into a competitive advantage, signalling to clients and stakeholders that they take financial crime seriously. Those that fail to act risk not only regulatory penalties but severe reputational damage in an era where transparency is paramount.
For firms looking to stress-test their readiness, our professional development course, "Preparing for the FCA AML Era: A Roadmap for Accountancy Practices", provides the essential framework for navigating this overhaul. We cover the specific data-driven expectations of the FCA and help you build a defence that protects your practice rights and reputation.
The regulator has changed. Your strategy must change with it.