Not every instrument is backed by its official text yet. At least one law or rulebook covered here has no official source (tier 1) retrieved for it yet. No finding on this page is shown with confidence above “Probable” until stronger sources are retrieved.

Financial Integrity Monitor

United Kingdom UK

Domains (D1–D6)
3
Sources
9
Role actions
8
Horizon <90d
2
Jurisdiction profile
Largely CompliantTier ARisk: StableMixed

UK AML/CTF regime rests on the Money Laundering Regulations 2017 (as amended), Sanctions and Anti-Money Laundering Act 2018, and Economic Crime and Corporate Transparency Act 2023.

MoreOFSI (sanctions), FCA, HMRC and 22 Professional Body Supervisors share enforcement; NCA's Combatting Kleptocracy Cell targets enablers. Reform pipeline (ECCTA ID verification, OFSI penalty overhaul, AML/CTF supervision reform) is active but supervisory fragmentation persists.

Key deficiencies
  • Fragmented multi-supervisor AML/CTF landscape (FCA, HMRC, 22 PBSs) creating registration and enforcement gaps
  • Overseas Territories (British Virgin Islands) and Crown Dependencies remain structurally weaker links under UK sovereignty, with BVI now FATF grey-listed and EU high-risk-listed
  • OFSI civil penalty volume (five penalties, ~£500k) remains modest relative to £37bn in frozen assets and sanctions regime scale
  • Professional enabler networks (lawyers, accountants, estate agents, TCSPs) continue to be exploited by corrupt elites and sanctioned Russians
Recent developments (18m)
  • UK NRA 2025 (4th comprehensive NRA) published 17 July 2025, upgrading crypto-asset ML risk to high
  • Companies House mandatory identity verification for directors/PSCs commenced 18 November 2025 under ECCTA
  • OFSI published overhauled enforcement framework (Early Account Scheme, Settlement Scheme, case assessment matrix) effective 9 February 2026
  • First-ever UK prosecution and conviction for Russian sanctions breaches (Ovsyannikov case, sentenced 11 April 2025)
  • OFSI's largest-ever sanctions penalty (Sabre Global Technologies, £1m, first circumvention-offence penalty) issued 17 June 2026
  • UK Anti-Corruption Strategy 2025 published, committing to a new AML and Asset Recovery Strategy in 2026
  • British Virgin Islands (UK Overseas Territory) added to FATF grey list (June 2025) and EU high-risk third-country list (December 2025)
Brief

Lead signal

Lead Signal

Read full brief

Lead Signal

The United Kingdom's sanctions architecture continued to layer new designations this cycle: on 8 October 2026 the Office of Financial Sanctions Implementation added 23 new designations and 8 ship specifications to the UK Sanctions List under the Russia regime, extending a package announced from 1 October 2026 and reaching third-country intermediary entities, including Kyrgyzstan-registered trading companies. This is consistent with an evasion-network targeting pattern in which designations increasingly follow the trail of intermediaries used to route sanctioned trade through third countries rather than targeting only Russian-domiciled entities directly. The pattern is architectural rather than episodic: each new tranche narrows the space available for using jurisdictionally distant corporate vehicles to intermediate sanctioned flows.

Other Developments

Beneficial-ownership verification deadline approaches. Companies House's Economic Crime and Corporate Transparency Act 2023 identity-verification regime requires existing directors and persons with significant control to verify their identity by 18 November 2026, narrowing the transition window to roughly six weeks remaining at the time of this cycle's research; Companies House has signalled enforcement action is expected from the end of 2026 against non-compliance. Crypto authorisation gateway opens. The Financial Conduct Authority opened its Cryptoassets Regulations 2026 authorisation gateway on 30 September 2026, with unauthorised crypto activity becoming illegal from 25 October 2027; this is a transitional milestone in the UK's phased crypto-asset regime rather than a change to the domestic AML/CTF statute. Domestic AML/CTF regime stable. The Money Laundering Regulations 2017, as amended most recently by S.I. 2026/621 (in force 30 June 2026), continue to narrow the mandatory enhanced-due-diligence trigger in regulation 33(1)(b) to FATF call-for-action countries only; there is no separate UK high-risk-third-countries list, and FATF grey-list status functions as a risk factor rather than a UK EDD trigger. FATF presidency. The UK holds the FATF presidency for a two-year term following the June 2026 plenary, with fraud named as a stated priority; the October 2026 plenary is the first held under UK chairmanship.

Cross-Monitor Connections

The approaching Companies House verification deadline intersects with the beneficial-ownership and corporate-transparency work tracked under the EU AML Package architecture, even though the UK sits outside the AMLR, 6AMLD and AMLA perimeter following its departure from the EU framework; the structural direction set by that package nonetheless offers a comparator for assessing the UK's own domestic verification regime. The FCA's crypto-authorisation gateway opening connects to payments and digital-asset monitoring of UK fintech activity, where the same transitional period will determine which firms can lawfully continue operating crypto services pending full commencement in October 2027. The continued layering of Russia-regime designations against third-country intermediary entities is relevant to conflict-finance and sanctions-evasion tracking wherever those intermediary jurisdictions recur across designations.

Outlook

The Companies House identity-verification deadline of 18 November 2026 is the most concrete near-term date to watch: enforcement posture is expected to activate shortly after, and the scale of non-compliance discovered at that point will be a useful indicator of how embedded identity verification has become among existing UK corporate officers. The FCA's crypto-authorisation regime has a longer runway, with full commencement not due until 25 October 2027, but the September 2026 gateway opening marks the start of the period during which firms must file to avoid falling outside the lawful perimeter. On sanctions, continued OFSI designation activity against intermediary entities in third countries should be expected to continue in tranches, consistent with the pattern observed this cycle, as the UK's first FATF-presidency plenary in October 2026 sets fraud priorities that may shape future designation and enforcement focus.

weekly_brief_draft · JID UK
Domain intelligence (D1–D6)

D1 Sanctions

Sanctions

Continue reading

The UK's Russia sanctions architecture extended further this cycle: on 8 October 2026, the Office of Financial Sanctions Implementation issued a notice adding 23 new designations and 8 ship specifications to the UK Sanctions List, building on a package first announced on 1 October 2026. Notably, the 8 October tranche reached entities registered in Kyrgyzstan, a third country, rather than confining designations to Russian-domiciled individuals and entities. This pattern is consistent with an evasion-network targeting theory: as direct routes for sanctioned trade and finance close, intermediary corporate structures in adjacent or distant jurisdictions become the mechanism by which sanctioned actors attempt to continue accessing international markets, and OFSI's designation activity has followed that intermediary layer. The architecture here is the relevant unit of analysis, not any single designation: successive tranches progressively narrow the space available for using third-country vehicles as sanctions-evasion intermediaries, and the recurrence of named jurisdictions across tranches would be the signal to track for future enforcement focus.

The UK's FATF presidency, assumed following the June 2026 plenary for a two-year term with fraud named as a stated priority, provides institutional context for this cycle's sanctions activity. The October 2026 plenary, the first held under UK chairmanship, sits at the intersection of the UK's domestic designation programme and its international standard-setting role; how fraud-related priorities interact with sanctions-evasion typologies over the UK's presidency term is a structural question worth tracking independently of any single designation event.

Outlook

Further OFSI designation tranches against the Russia regime should be expected to continue, and the recurrence of specific third-country jurisdictions across successive tranches would strengthen the evasion-network reading of this cycle's Kyrgyzstan-registered designations. The UK's conduct of its first FATF presidency plenary in October 2026, with fraud as a stated priority, is a near-term institutional milestone whose outputs may shape future sanctions-adjacent typology guidance.

D2 Beneficial Ownership

Beneficial Ownership and Corporate Transparency

Continue reading

In the United Kingdom, the directly relevant beneficial-ownership development this cycle is domestic rather than EU-driven: Companies House's Economic Crime and Corporate Transparency Act 2023 identity-verification regime requires existing directors and persons with significant control to verify their identity by 18 November 2026, narrowing the remaining transition window to roughly six weeks as at this cycle's research. Companies House has signalled that enforcement action against non-compliance is expected to begin from the end of 2026, meaning the period immediately following the November deadline is likely to be the first test of how the regime is enforced against officers who have not completed verification.

Globally, the EU AML Package sets the structural direction for beneficial-ownership and corporate-transparency regulation: the package comprises three distinct instruments, the directly applicable AML Regulation (Reg (EU) 2024/1624), the sixth AML Directive (transposed per Member State), and the AMLA Regulation (Reg (EU) 2024/1620) establishing the Anti-Money Laundering Authority, with AMLA's direct and indirect supervision perimeter shifting beneficial-ownership and corporate-transparency supervision from purely national authorities toward a hybrid EU-level regime. The United Kingdom sits outside this perimeter following its departure from the EU framework, so the AMLR/6AMLD/AMLA architecture is durable structural backdrop for comparison rather than a directly applicable UK regime. The UK's own corporate-transparency enforcement model, centred on the ECCTA identity-verification transition described above, is the domestically relevant development to read against that backdrop.

Outlook

The 18 November 2026 identity-verification deadline is the near-term date to watch; the rate and nature of non-compliance discovered once Companies House begins enforcement from the end of 2026 will indicate how embedded identity verification has become among existing UK corporate officers, and whether further legislative tightening becomes necessary.

D3 Enabler Jurisdictions

Not covered

Enabler Jurisdictions is not yet covered for this jurisdiction in this report.

D4 Conflict Finance

Not covered

Conflict Finance is not yet covered for this jurisdiction in this report.

D5 Crypto / Digital Assets / Financial Innovation

Crypto, Digital Assets, and Financial Innovation

Continue reading

The UK's own regulatory environment for digital assets moved this cycle with the Financial Conduct Authority's opening of its Cryptoassets Regulations 2026 authorisation gateway on 30 September 2026. From that date, firms wishing to carry on regulated crypto-asset activities in the UK can begin the authorisation process; unauthorised crypto activity will become illegal from 25 October 2027, meaning the period between gateway opening and full commencement functions as a transitional filing window rather than an immediate enforcement deadline. This is a milestone in the UK's own transitional crypto-asset regime and is distinct from any EU-level framework: the UK's approach proceeds under its domestic Financial Services and Markets Act architecture rather than under MiCA or any EU instrument.

The practical AML/CTF relevance of this gateway is that firms moving through authorisation will, in the course of that process, also be assessed against the UK's existing AML/CTF framework (the Money Laundering Regulations 2017, as amended), meaning the crypto-authorisation gateway functions partly as a mechanism for bringing previously unauthorised crypto-asset businesses inside the UK's standing AML/CTF perimeter. The roughly thirteen-month runway between gateway opening and full commencement gives both firms and the FCA a window in which authorisation status, rather than enforcement, is the operative compliance question for UK crypto-asset businesses.

Outlook

The period between the 30 September 2026 gateway opening and the 25 October 2027 commencement date is the window to watch: the volume and outcome of authorisation applications during this period will indicate how much of the UK's existing crypto-asset sector successfully transitions into the authorised perimeter before unauthorised activity becomes illegal.

D6 Compliance Technology & Active Defence

Not covered

Compliance Technology & Active Defence is not yet covered for this jurisdiction in this report.

D7 AML/CTF Regime

Not covered

AML/CTF Regime is not yet covered for this jurisdiction in this report.

D8 Commercial Activity

Not covered

Commercial Activity is not yet covered for this jurisdiction in this report.

Regulatory horizon
In Force2025-Q3 · ±year

Economic Crime and Corporate Transparency Act 2023 — failure to prevent fraud offence

No new commencement step this cycle; status re-verified as in force.
In Force Pending2026-Q4 · ±quarter

Companies House ECCTA identity verification — existing directors/PSCs transition close

Transition window narrows to roughly six weeks remaining; enforcement posture due to activate shortly after.
2 dated · 5 pending date · baseline fim-2026-07-08
Role action cards
MLRO

OFSI added 23 Russia-regime designations and 8 ship specifications on 8 October 2026, reaching third-country intermediary entities.

Screening lists require immediate update against the 8 October 2026 OFSI notice; the inclusion of Kyrgyzstan-registered entities signals a broader net for correspondent and counterparty screening beyond Russian-domiciled names.

1 evidence refs
Compliance

Companies House identity-verification deadline for existing directors and PSCs falls on 18 November 2026.

Corporate customer due-diligence files involving UK-incorporated entities should be reviewed for director/PSC verification status ahead of the deadline, given Companies House's signalled enforcement intent from end-2026.

1 evidence refs
Legal

No material change this cycle.

No material change for this persona this cycle

Board

UK assumed the FATF presidency for a two-year term with fraud as a stated priority, holding its first plenary under that chairmanship in October 2026.

The UK's institutional role in setting international AML/CTF standards for the next two years is a reputational and strategic consideration for firms headquartered or heavily exposed to the UK market.

1 evidence refs
CTO

FCA opened its crypto-asset authorisation gateway on 30 September 2026, with unauthorised activity becoming illegal from 25 October 2027.

Technical infrastructure supporting crypto-asset products aimed at UK customers should be assessed against the new authorisation gateway's requirements during the transitional filing period.

1 evidence refs
Risk

Continued layering of Russia-regime sanctions designations against third-country intermediary entities signals an evasion-network targeting pattern.

Exposure concentration analysis should account for the recurrence of third-country jurisdictions, such as Kyrgyzstan, across successive OFSI designation tranches as a potential leading indicator of future designations.

1 evidence refs
Operations

No material change this cycle.

No material change for this persona this cycle

Audit

Companies House identity-verification transition for existing directors and PSCs closes 18 November 2026.

Audit trails for UK corporate-customer onboarding should document director/PSC verification status ahead of the deadline to support control-testing scope once Companies House enforcement activates from end-2026.

1 evidence refs
Decision lens
MLRO

OFSI added 23 Russia-regime designations and 8 ship specifications on 8 October 2026, reaching third-country intermediary entities.

Compliance

Companies House identity-verification deadline for existing directors and PSCs falls on 18 November 2026.

Legal

No material change this cycle.

Board

UK assumed the FATF presidency for a two-year term with fraud as a stated priority, holding its first plenary under that chairmanship in October 2026.

CTO

FCA opened its crypto-asset authorisation gateway on 30 September 2026, with unauthorised activity becoming illegal from 25 October 2027.

Risk

Continued layering of Russia-regime sanctions designations against third-country intermediary entities signals an evasion-network targeting pattern.

Operations

No material change this cycle.

Audit

Companies House identity-verification transition for existing directors and PSCs closes 18 November 2026.

Shared evidence: 2 refs
Scenario sketches

AMLA direct-supervision transition and cross-border obliged-entity evasion response

Illustrative scenario for analytical orientation: as AMLA moves toward direct and indirect supervision of cross-border obliged entities under the AMLA Regulation (Reg (EU) 2024/1620), alongside the directly-applicable AMLR (Reg 2024/1624) and per-state 6AMLD transposition, the shift from purely national AML supervision toward a hybrid EU-level regime could alter where evasion typologies migrate. One illustrative possibility is that obliged entities operating across multiple EU jurisdictions recalibrate their compliance posture toward whichever national regulator is perceived as least rigorous ahead of AMLA's full assumption of direct-supervision duties, a structural dynamic distinct from and external to the UK's own post-Brexit domestic regime. This sketch is architecture-over-incident framing and illustrates a possible structural mechanism, not an observed fact.

Illustrative scenario for analytical orientation only. Not compliance advice, not a prediction, and not a statement of observed fact.

Standing trackers (T1–T6)
TrackerStatusNote
T1 · Russian Sanctions-Evasion ArchitectureescalatingNew 8 Oct 2026 OFSI designations (23 entities/individuals, 8 ships); Sakhalin-2 exemptions extended to 31 Dec 2026; LNG maritime ban widening from 1 Jan 2027.
T2 · EU AML Package / AMLAstableUK sits outside AMLR/6AMLD/AMLA post-Brexit; no material UK-specific movement this cycle.
T3 · FATF Grey ListstableUK holds FATF presidency for two years with fraud as a stated priority; next plenary (first under UK chairmanship) scheduled October 2026.
T4 · Beneficial-Ownership Register StatusstableCompanies House ECCTA identity-verification transition closes 18 November 2026; enforcement expected from end-2026.
T5 · Crypto & Digital-Asset IntegritystableFCA Cryptoassets Regulations 2026 authorisation gateway opened 30 September 2026; unauthorised activity unlawful from 25 October 2027.
T6 · Sanctions Regime DivergencestableNo new UK-specific divergence signal beyond the already-noted MLR 2017 reg 33(1)(b) EDD-trigger reform (S.I. 2026/621, in force 30 June 2026).
Registers

Enforcement actions

  • OFSI imposed a £1 million monetary penalty on SGTL, a technology firm, for continuing to provide Russian carrier Ural Airlines access to its Global Distribution System for seven months after Ural Airlines was designated in May 2022. This was OFSI's first penalty for a circumvention offence. 17 Jun 2026
  • OFSI published details of a £160,000 monetary penalty against Bank of Scotland Plc for breaching the Russia financial sanctions regime, citing weaknesses in screening data/configuration, escalation and training. 1 Jan 2026
  • First-ever UK criminal convictions for Russian-linked financial sanctions breaches. Dmitrii Ovsyannikov, former Sevastopol governor and Russian Deputy Minister, and a family member were convicted of eight sanctions breaches and two money-laundering counts at Southwark Crown Court. 11 Apr 2025
  • Using new ECCTA registrar powers, Companies House queried and removed false or misleading information affecting over 100,000 companies, rejected thousands of suspicious applications, changed 140,000+ addresses to prevent misuse, and commenced casework that could lead to court cases and financial penalties for identity-verification non-compliance. 22 Jan 2026

Sanctions changes

  • UK sanctions package targeting Russia's shadow fleet and GRU-linked technology procurement network ('Neptune'), bringing total UK-sanctioned shadow-fleet/LNG vessels to over 600 and designating three companies and ten GRU officers, plus third-country suppliers in China, Thailand and Türkiye. 1 Jun 2026
  • Following a 2025 public consultation, OFSI intends to double its statutory maximum civil penalty for financial sanctions breaches to the higher of £2 million or 100% of the breach value (from £1 million/50%), alongside a new Early Account Scheme, Voluntary Disclosure and Co-operation discount, and Settlement Scheme. 29 Jan 2026
  • HM Treasury's High Risk Third Countries advisory notice (mirroring FATF's grey list) added the British Virgin Islands and Bolivia as High-Risk Third Countries under UK MLR Regulation 33, requiring enhanced due diligence for BVI-linked business relationships despite BVI being a UK Overseas Territory. 24 Oct 2025

Regulatory horizon (register)

  • Companies House identity verification extended to third-party filers/agents
  • FCA cryptoasset FSMA perimeter authorisation window opens
  • New UK Anti-Money Laundering and Asset Recovery Strategy
  • Legislative doubling of OFSI's statutory maximum penalty
  • UK's next FATF Mutual Evaluation Report (5th round)

Active schemes

  • [CRITICAL] Russian shadow-fleet oil evasion and third-party enabler circumvention
  • [HIGH] Professional enabler networks laundering kleptocratic wealth in the UK
  • [HIGH] TCSP and BO-opacity exploitation via British Virgin Islands
  • [HIGH] Crypto-to-fiat sanctions evasion via stablecoins touching UK-adjacent markets
Sources
  1. HM Treasury / Home Office
  2. OFSI / HM Treasury
  3. FATF
  4. European Commission
  5. Bloomberg
  6. OCCRP
  7. Companies House
  8. Chainalysis
  9. Council of the European Union
Coverage gaps
HM Treasury's own consultation acknowledges that a fragmente…
HM Treasury's own consultation acknowledges that a fragmented supervisory system with multiple entry points into AML/CTF-regulated services for the same firm types creates gaps and inconsistencies that corrupt actors may exploit, and that firms can switch between supervisors.
The British Virgin Islands, a UK Overseas Territory under UK…
The British Virgin Islands, a UK Overseas Territory under UK sovereignty, was added to both the FATF grey list (June 2025) and the EU high-risk third-country list (December 2025) for TCSP supervision, beneficial ownership and SAR-quality deficiencies, remaining listed through the June 2026 plenary.
OFSI itself reports imposing only five monetary penalties an…
OFSI itself reports imposing only five monetary penalties and two disclosures over a 12-month period, against a backdrop of £37 billion in assets reported frozen and 396 suspected breach cases recorded in 2023/24 (up from 147 in 2021/22).
The UK Anti-Corruption Strategy 2025 commits to enhancing be…
The UK Anti-Corruption Strategy 2025 commits to enhancing beneficial ownership transparency in Crown Dependencies and Overseas Territories via registers with legitimate-interest access as an interim step to public registers, with CD implementation only aligned to the EU's July 2026 deadline rather than immediate public disclosure.

Evidence

Confidence-tiered claims

23 new designations and 8 ship specifications added to the UK Sanctions List on 8 October 2026, including Kyrgyzstan-registered entities. SRC-fim-UK-001
Confirmed · 1 source
Existing directors and PSCs must verify identity by 18 November 2026; enforcement expected from end-2026. SRC-fim-UK-002
Probable · 1 source
FCA opened its crypto authorisation gateway on 30 September 2026; unauthorised crypto activity becomes illegal from 25 October 2027. SRC-fim-UK-003
Probable · 1 source
MLR 2017 as amended by S.I. 2026/621 (in force 30 June 2026) narrows mandatory EDD trigger in reg 33(1)(b) to FATF call-for-action countries only; no change this cycle. SRC-fim-UK-003
Probable · 1 source
UK assumed FATF presidency for two years following the June 2026 plenary, with fraud as a stated priority; October 2026 plenary is the first under UK chairmanship. SRC-fim-UK-003
Probable · 1 source