The Financial Conduct Authority is the UK regulator that supervises how financial firms behave and enforces their anti-money-laundering obligations. For any firm it authorizes, the FCA is both the source of the standard you must meet and the body that fines you for missing it.
What is the FCA, in plain English?
The FCA is the United Kingdom's conduct regulator for financial services. It authorizes firms to operate, sets the standards for how they treat customers and markets, and enforces those standards when firms fall short. Alongside conduct, it is a key AML supervisor, checking that the firms it authorizes have the systems and controls to detect and prevent financial crime.
Its toolkit runs from guidance and thematic reviews at the soft end to fines, business restrictions, and individual bans at the hard end. When the FCA publishes a Dear CEO letter or a thematic review, it is telling the whole sector what good looks like and where it will be looking next. When it publishes an enforcement notice, it is showing exactly which failures cost money.
For operators, the FCA is a practical benchmark. Its expectations define the standard your financial-crime systems and controls will actually be judged against in a UK exam, so its signals tell you where UK supervisory attention is focused right now.
How the FCA supervises a firm
Supervision is continuous, not a single event, and it escalates when something looks wrong:
- Authorize — Gateway approval. A firm must satisfy the FCA on its controls and its senior managers before it can operate.
- Monitor — Ongoing supervision. Data returns, thematic reviews, and Dear CEO letters set expectations and gather intelligence.
- Probe — Focused review. A skilled-persons review or a visit tests financial-crime systems and controls in depth.
- Act — Enforcement. Serious failures lead to fines, restrictions, or bans on the individuals responsible.
Who is involved?
Who | Their role |
The FCA | Authorizes firms, sets conduct and AML expectations, and enforces failures. |
Senior managers | Named individuals held personally accountable for financial-crime controls under the accountability regime. |
The MLRO | The firm's money-laundering reporting officer, the FCA's main point of contact on financial crime. |
Other UK bodies | The PRA, HMRC, and the NCA share the wider UK financial-crime framework the FCA operates within. |
What it looks like in practice
In practice
The FCA publishes a thematic review on transaction monitoring at challenger banks, warning that fast onboarding without matching financial-crime controls is a recurring weakness. A UK e-money firm reads it as a shot across the bow.
The compliance lead maps the review's findings against the firm's own onboarding and monitoring, finds that alert thresholds have not kept pace with customer growth, and opens a remediation project before any exam is scheduled. When the FCA later requests data on alert volumes and clearance times, the firm can show it already acted, which changes the tone of the conversation entirely.
Why the FCA matters to operators
If your firm is UK-authorized, the FCA effectively defines your ceiling and your floor. Its published thematic reviews and enforcement notices are the clearest read available on what UK supervisors expect from financial-crime systems and controls, and they are free to study. Reading a peer's enforcement notice is one of the cheapest ways to find the gaps in your own program before an examiner does.
The FCA also matters because of personal accountability. Under the senior managers regime, named individuals can be fined or banned, so FCA expectations are not an abstract corporate concern; they land on specific people. That raises the stakes on getting the controls right and documenting that you did.
What to watch
- Dear CEO letters. These name the FCA's current priorities for a sector; treat one addressed to your business type as a direct instruction.
- Thematic reviews. They describe good and poor practice across many firms and preview where exams will focus next.
- Enforcement notices. Each one is a case study in what failure costs; map the findings against your own controls.
- Skilled-persons reviews. A commissioned review under section 166 is a strong signal the FCA has serious concerns.
- Individual accountability. Bans and fines on named senior managers show the FCA will hold people, not just firms, responsible.
Quick questions
Is the FCA the UK version of a central bank?
No. The FCA is the conduct and financial-crime regulator. Prudential soundness of the largest firms sits with the Prudential Regulation Authority, part of the Bank of England. The two work alongside each other.
Does the FCA supervise AML for every UK firm?
It supervises AML for the firms it authorizes, which is most of the financial sector. Some sectors, such as certain accountancy and legal services, are supervised by other bodies, and HMRC covers money-service businesses it registers.
What is a Dear CEO letter?
It is a public letter the FCA sends to firms in a sector setting out its concerns and expectations. It is not formal rulemaking, but ignoring one is risky because it signals exactly where supervisory attention will land.
Can the FCA punish individuals?
Yes. Under the senior managers regime it can fine or ban named individuals responsible for failings, including for weak financial-crime controls. This makes accountability personal rather than purely corporate.
How is the FCA different from the FATF?
FATF sets global standards and evaluates countries; it never supervises a firm. The FCA is a national regulator that supervises and enforces against actual UK firms, often implementing standards that trace back to FATF.
How should I use FCA publications?
Read thematic reviews and enforcement notices as a benchmark for what good looks like, then gap-assess your own controls against them. Doing this before an exam lets you fix issues on your own terms rather than under supervision.