The UK's frontline defense against dirty money is looking pretty thin. You'd think lawyers and accountants—the very people who should know the rules best—would be leading the charge. Instead, the latest report from the Office for Professional Body Anti-Money Laundering Supervision (OPBAS) shows they're still struggling to get the basics right. It’s not just a minor slip-up. It's a systemic failure that has forced the government to strip these professional bodies of their power.
Honestly, the numbers are grim. OPBAS found that none of the professional body supervisors (PBSs) they assessed were fully effective in every area. We aren't talking about small, niche groups either. These are the 25 organizations responsible for making sure thousands of law and accounting firms don't accidentally (or intentionally) help criminals wash their cash. Discover more on a related issue: this related article.
The watchdog finally lost its patience
For years, the UK government has tried to play nice. They gave professional bodies the chance to police their own members. The idea was that specialized bodies would understand the nuances of their specific sectors better than a giant state regulator. That experiment is effectively over.
The Treasury has announced that the Financial Conduct Authority (FCA) will take over as the single supervisor for professional services. Why? Because the current setup is a mess of inconsistent standards and weak enforcement. When you've got 25 different groups all doing things their own way, the gaps are wide enough to drive a truck full of illicit cash through. Further analysis by NPR highlights comparable views on this issue.
OPBAS didn't mince words in its 2024/2025 assessment. They pointed out that many supervisors are still too "member-centric." In plain English, they’re too worried about being friendly with the firms they’re supposed to be watching. This conflict of interest means they're often too slow to hand out fines or pull the plug on non-compliant firms.
Why the current controls are failing
If you look under the hood of these firms, the problems are remarkably consistent. It’s rarely a case of James Bond-style villains plotting in dark rooms. Usually, it's just laziness or a total lack of specialized knowledge.
- Template-itis: Firms are using generic, "off-the-shelf" risk assessment templates. They don't tailor them to their actual clients or the specific risks they face. A template designed for a high-street corner shop won't work for a firm dealing with offshore trusts.
- The "I know them" excuse: Many long-standing partners skip the boring due diligence because they’ve known a client for twenty years. That’s exactly how professional enablers get caught out. Criminals don't always look like criminals; sometimes they look like your oldest friend's business partner.
- Weak enforcement: Fines have actually declined in value recently. When the "punishment" for a breach is a small fine that doesn’t even eat into the year's profits, firms treat it as a cost of doing business rather than a reason to change.
Identifying the high risk zones
Not every professional service is equally vulnerable. The National Risk Assessment continues to highlight specific areas where the "bad actors" like to play. If you're working in these sectors, the target on your back is much bigger.
- Trust and Company Service Providers (TCSPs): These are the folks setting up complex structures that can hide who actually owns the money.
- Conveyancing: Real estate remains the favorite playground for money launderers. It’s a high-value, relatively stable way to park dirty cash.
- Payroll Services: A newer favorite. It's a great way to funnel small amounts of money through legitimate-looking salary payments.
The scary part? OPBAS found that 87% of firms in the professional services sector were classified as "low risk" by their supervisors. That’s a massive disconnect from the reality of the threat. If the supervisors don't even think there's a problem, they aren't going to find one.
The move to FCA supervision
The shift to the FCA isn't just a change of letterhead. It’s a move toward a more "hard-nosed" style of regulation. The FCA already supervises over 16,000 firms. They have the tech, the data, and—most importantly—the appetite for big fines.
Last year, OPBAS used its power of public censure for the first time against a professional body that just wasn't doing its job. This was a warning shot. The era of "assisted compliance"—where supervisors just gently remind you of the rules—is ending. We're moving into an era of "enforcement-led" supervision.
You can expect more on-site visits and more "desk-based reviews." In 2023-24, these reviews spiked to over 9,000, covering about 10% of supervised firms. That number is only going up. If you haven't had a knock on the door yet, don't assume you won't.
What you need to do now
You don't need to wait for the FCA to take over to fix your house. The "I didn't know" defense doesn't work in court, and it definitely won't work with the new regime.
First, throw away those generic risk assessment templates. If your risk assessment doesn't mention the specific countries your clients operate in or the specific services you provide, it's worthless. You need to document why you think a client is low, medium, or high risk. "They seem nice" isn't a category.
Second, get your training sorted. Most firms do a 20-minute video once a year and call it "compliance." That’s not enough. Your staff need to know how to spot red flags in real-time. They need to know what a suspicious source of funds looks like. If they can't explain the difference between source of wealth and source of funds, you’ve got a problem.
Finally, keep records of everything. If you did the check but didn't write it down, the regulator will assume it never happened. Missing ID documents and unverified directors are the easiest things for an inspector to find. Don't give them an easy win. The transition to the FCA is coming, and they won't be looking for reasons to be your friend.
Start by auditing your top 10% highest-value clients. If their files aren't perfect, your entire firm is at risk. Fix those first, then work your way down. You've got a window of time before the new rules kick in—don't waste it.
