A “changing of the guard” is underway in the world AML supervision. As recently reported by the Law Society Gazette, the UK government is moving toward a single supervisory model, with the FCA set to take over AML oversight from the SRA and other professional bodies.
For many law firms, the reaction has been a mix of uncertainty and, dangerously, complacency. Anticipating that SRA AML audits will be winding down, some firms may feel tempted to “wait and see” what the new regime looks like before investing in further compliance.
This is a mistake. Here is why an independent AML audit is no longer just a regulatory “tick-box” exercise, but a vital strategic shield, and why you must choose an assessor who understands both your current SRA obligations and the looming FCA standard.
1. The End of “Guidance-Led” Supervision
The SRA has traditionally operated on a guidance-led approach, often focusing on education and support for firms. The FCA is a different animal. Known for its data-driven, intrusive, and “sharper” enforcement style, the FCA has unlimited fining powers and a mandate to disrupt financial crime aggressively.
If your firm is currently operating with “just enough” compliance to satisfy an SRA desk-based review, you may find yourself woefully unprepared for an FCA AML Audit. An independent audit today allows you to identify “compliance debt” before a more punitive regulator finds it for you.
2. Bridging the Expertise Gap
The SRA understands the nuances of legal practice—client confidentiality, legal professional privilege, and the realities of a conveyancing desk. The FCA, while expert in financial systems, is still developing its specific understanding of the legal sector.
This creates a “double jeopardy” risk. You need an independent auditor who can translate your legal workflows into the language of the FCA. An effective audit will ensure your Risk Assessment isn’t just legally sound, but also meets the rigorous “fit and proper” data standards the FCA expects from its supervised firms.
3. Evidencing “Effectiveness,” Not Just “Existence”
One of the key takeaways from the recent SRA annual reports is that while most firms have the right AML Policies in place, nearly a third are still failing because those controls aren’t effective in practice. This is particularly clear when assessors look at client matter risk assessments.
The FCA places a massive premium on governance and effectiveness. They don’t just want to see your AML policy; they want to see the minutes of the board meetings where that policy and any AML policy updates was debated . They want to see how your “high-risk” flags actually triggered an enhanced due diligence (EDD) process that stopped a suspicious transaction. An independent AML auditor provides the objective “stress test” needed to prove your controls actually work.
4. Selecting the Right Assessor: The Hybrid Approach
When selecting an independent AML auditor for your next Section 21 (or Regulation 21) audit, the criteria have changed. You can no longer afford an assessor who only knows the SRA handbook.
Your ideal assessor should demonstrate:
- Dual-Sector Knowledge: They must understand the SRA’s current expectations (to keep you safe today) and the FCA’s “Financial Crime Guide” (to keep you safe tomorrow).
- AML Data-Centricity: They should be able to audit your data quality, as the FCA uses data-driven tools to flag high-risk firms for inspection.
- Strategic Foresight: They should help you align your current AML/CTF (Counter-Terrorist Financing) framework with the anticipated 2027/2028 transition phases.
The Bottom Line
Complacency is the greatest risk your firm faces during this transition. By the time the FCA’s “Single Professional Services Supervisor” (SPSS) regime is fully codified, it will be too late to fix systemic issues.
An independent AML audit is your opportunity to “pre-clear” your firm. It turns a looming regulatory threat into a demonstration of excellence, ensuring that when the FCA AML Audit comes, you aren’t just compliant, you’re ahead of the curve.