FCA applying increased scrutiny to Annex 1 firms

Key dates

20 March 2026

- The FCA published the statement announcing increased scrutiny of Annex 1 firms and warning that registration applications should be expected to take longer

TBD (ongoing, from the date of publication)

- Annex 1 firms that are not registered should submit a registration application before continuing Annex 1 activity, because the FCA states such firms need to be registered for AML purposes

TBD (ongoing supervisory cycle)

- Around 900 Annex 1 firms are subject to FCA information requests to support supervisory risk assessment and intelligence gathering

Suggested considerations

• Confirm whether any UK business line falls within Annex 1 scope and, if so, verify that the entity is registered with the FCA for AML purposes before continuing the activity.
• Submit a registration application immediately if the firm carries on Annex 1 activity without being registered.
• Reassess the firm’s AML framework at entity level, rather than relying on group-level policies or parent-company controls, and document why the controls are appropriate for the firm’s own risks and operations.
• Replace any generic or off-the-shelf procedures with policies, controls, and procedures tailored to the firm’s actual products, customers, geographies, and delivery model.
• Prepare evidence of MLR compliance for FCA review, including risk assessment logic, governance arrangements, customer due diligence processes, and monitoring controls.
• Review counterparty onboarding and due diligence procedures so regulated firms can verify whether Annex 1 counterparties are registered and understand the nature of their business.

What changed

• - The FCA is closely scrutinising applications to register as an Annex 1 firm, indicating a tougher gateway for new registrations and potentially more refusals or delay where evidence is weak.
• Annex 1 firms must demonstrate compliance with the Money Laundering Regulations, rather than merely assert that controls exist.
• The FCA is warning firms that registration applications will take longer, which affects launch plans, transaction timing, and group structuring decisions.
• The FCA has sent an information request to around 900 Annex 1 firms to better understand their activities, business models, and risks.
• The FCA says it will use this information, together with other intelligence, to identify and disrupt financial crime risks in the sector.
• The FCA reiterates that firms cannot rely on parent-company controls or off-the-shelf procedures; each entity must have controls tailored to its own governance, operations, and risk profile.

Who is affected

• Unregulated lenders
• Safe custody providers
• Money brokers
• market or related financing activity within Annex 1 scope.
• Financial leasing companies
• Special purpose vehicles
• Regulated firms
• Group entities