Executive Summary
2021 was a watershed year for FCA enforcement, with total fines reaching approximately £568 million - the highest since the FX scandal years of 2014-15. Two cases dominated: NatWest's criminal prosecution resulting in a £264.8 million fine (the first criminal conviction of a bank by the FCA), and HSBC's £176 million penalty for transaction monitoring failures.
These landmark cases demonstrated the FCA's willingness to use its full range of enforcement powers, including criminal prosecution for money laundering offences. The message to the industry was unambiguous: AML compliance failures carry existential risks.
Regulatory Context
2021 saw the UK financial services sector adjust to post-Brexit regulatory independence. The FCA assumed responsibilities previously held by EU authorities, including oversight of UK branches of EEA firms. This expanded remit increased supervisory demands on both firms and the regulator.
The FCA published its Transformation Programme, committing to become a more innovative, assertive, and adaptive regulator. The programme's emphasis on data-led supervision and proactive intervention signalled a shift from purely reactive enforcement.
The COVID-19 pandemic continued to affect regulatory priorities, with the FCA maintaining business interruption insurance investigation while also addressing emerging conduct risks in the retail investment market, particularly around high-risk investments and financial promotions.
Key Enforcement Themes
- Criminal prosecution used for first time against major bank
- Transaction monitoring systems face intensive scrutiny
- Cash deposit monitoring highlighted as critical control
- AML leadership and governance under spotlight
- Post-pandemic enforcement activity accelerates
Professional Insight
The NatWest criminal prosecution represents a paradigm shift in UK AML enforcement. The case demonstrated that the FCA will use criminal powers where evidence supports charges, regardless of institutional size or reputation. The offence - failing to prevent money laundering through inadequate suspicious activity reporting - sets a precedent with significant implications for compliance frameworks.
The case facts are instructive: over £365 million in cash deposits through one customer account over five years, with obvious red flags that were not adequately investigated or reported. This was not a sophisticated scheme requiring advanced detection capabilities - it was basic AML failure.
The HSBC fine reinforced the transaction monitoring theme. The FCA found that systems were inadequate to monitor the volume and complexity of transactions, with over 40 million customers affected by the deficiencies over eight years. The remediation cost reportedly exceeded the fine amount.
For MLROs and compliance leaders, 2021 established that personal accountability accompanies institutional responsibility. Regulators expect to see documented evidence of appropriate challenge, resource requests, and escalation where necessary.
Looking Ahead
The 2021 enforcement actions set a new baseline for AML expectations. Firms should assume that their transaction monitoring systems will face detailed supervisory review and that criminal prosecution remains available for serious failures.
The Consumer Duty consultation published in December 2021 signalled the next major regulatory development, with implementation expected to reshape conduct standards across retail financial services.