Every role. Every function. Every individual.
By the end of this lesson, you will understand your personal AML obligations and the consequences of non-compliance.
Customer-facing staff & operations. Identify, verify, monitor, escalate.
Risk & compliance. Policy, oversight, SAR management, training.
Internal audit. Independent assurance, reports to the Board.
Regardless of your role, s.330 POCA applies to you.
Maximum imprisonment for principal money laundering offences
These are personal offences. They apply to you, not the firm.
The FCA fine against Barclays — 2025
40 credits. 120-question exam. USD 2,095. Recertify every 3 years.
Stay vigilant. Stay informed. Stay compliant.
Opening: Welcome to the final lesson. Over five lessons we have covered the mechanics of money laundering, the regulatory framework, CDD, red flags, and reporting. This lesson brings it all together — your personal role and responsibilities.
Key message: A bank is only as strong as its people. Every role, every function, every individual plays a part in preventing financial crime.
Transition: "Let's start with what you will learn in this final lesson."
Three areas: (1) Role-specific AML responsibilities across the Three Lines of Defence. (2) Consequences of non-compliance — both personal and institutional. (3) Course recap and next steps in your AML learning journey.
Learning outcome: By the end, participants will understand their personal AML obligations and the consequences of non-compliance.
Talking point: This is the lesson that makes it personal. The penalties we discuss are not corporate fines — they are criminal sentences that apply to individuals.
Transition: "Let's begin with the Three Lines of Defence and where you fit."
First Line — Customer-facing staff & operations: Identify red flags during interactions. Conduct CDD at onboarding and throughout the relationship. Monitor transactions. Escalate suspicions to the MLRO immediately. In the Stunt & Co case, insufficient checks at onboarding allowed GBP 46.8M to flow through. (Source: Barclays Bank UK Annual Report 2024)
Second Line — Risk & Compliance: One group-wide Financial Crime Policy, eleven standards. Design AML policies, provide oversight, manage SAR process, deliver training, conduct firm-wide risk assessments. (Source: Barclays Financial Crime Policy Position Statement)
Third Line — Internal Audit: Independent function reporting to Board Audit Committee. Tests whether AML controls actually work, identifies gaps, recommends improvements.
Transition: "Regardless of which line you sit in, every employee has baseline obligations."
Universal obligations: (1) Awareness — understand the basics of ML and how it manifests in banking. (2) Training — complete mandatory AML training annually and stay current with policy updates. (3) Vigilance — remain alert even outside your direct role. Red flags can appear in HR, marketing, procurement, or IT. (4) Reporting — if you see something, report it.
Critical point: s.330 POCA applies to ALL persons in the regulated sector, regardless of seniority or function. This is not limited to compliance teams or front-line staff — it applies to everyone in the room.
Talking point: Ask the audience: "Has anyone here ever noticed something that felt unusual in a customer interaction, a transaction, or even a conversation?" The answer is almost always yes. The question is whether they acted on it.
Transition: "Let's look at what happens when people do not fulfil these obligations."
Personal criminal liability: These are PERSONAL offences — they apply to the individual, not the firm. An employee who fails to report, or who tips off a suspect, faces prosecution in their own name. (Source: CPS Prosecution Guidance)
14 years: Maximum for principal ML offences (ss.327-329) — concealing, arranging, or possessing criminal property.
5 years: Maximum for failure to disclose (s.330) — knowing or suspecting ML and saying nothing.
2 years: Maximum for tipping off (s.333A) — disclosing that a SAR has been filed.
Key message: These sentences apply to YOU personally. Not the firm, not the department, not your line manager. You.
Transition: "The personal consequences are severe. But the institutional costs are staggering too."
GBP 42M fine: The FCA's combined penalty for Barclays in 2025 — GBP 39.3M for Stunt & Co + GBP 3.1M for WealthTek. Plus GBP 6.3M voluntary ex-gratia payment to WealthTek clients. (Source: FCA Press Release)
Beyond the fine: International media coverage, investor concern, customer trust damage, heightened regulatory scrutiny, remediation programme costs, additional compliance staffing. The Oxford Business Law Blog analysis noted this became a case study across the industry. (Source: Oxford Business Law Blog)
Talking point: The reputational damage often exceeds the fine. The Barclays name appeared in headlines worldwide. This affects every employee's working environment, the firm's ability to attract talent, and its relationships with counterparties.
Transition: "And the FCA is not slowing down. Let's look at what is coming."
FCA 2026 direction: Material AML deficiencies will be treated as governance failings — not just compliance failures but failures of senior management. This increases the risk of personal liability under SM&CR. (Source: Browne Jacobson horizon scanning)
SM&CR: Senior Managers and Certification Regime — designated senior managers are personally accountable for the areas they oversee. If AML failures occur due to inadequate governance, individuals face personal regulatory action.
Intelligence-led supervision: The FCA is enhancing data analytics capabilities to identify firms with weak controls BEFORE enforcement action is needed. Firms can expect more frequent supervisory visits, data requests, and thematic reviews. (Source: WilmerHale FCA trends analysis)
Talking point: The direction of travel is clear: more scrutiny, faster identification of weaknesses, personal accountability. Proactive compliance is not optional — it is survival.
Transition: "Let's recap what we have covered across all six lessons."
Course recap: Walk through each lesson briefly. L1: What ML is, three stages, GBP 10B through UK mules annually. L2: POCA, MLR, FATF, three lines of defence. L3: CDD fundamentals, SDD/CDD/EDD, PEPs, ongoing monitoring. L4: Transaction and behaviour red flags, Stunt & Co and WealthTek case studies. L5: SARs, MLRO, tipping off, safe harbour. L6: Role-specific responsibilities, personal consequences.
Talking point: This is a good moment to pause and ask if there are questions about any specific lesson. Encourage participants to think about which lesson is most relevant to their daily work.
Transition: "Let me distil all of this into five things you must remember."
Five things to remember: (1) Suspect it, report it — the threshold is suspicion, not certainty. (2) Never tip off — it is a criminal offence (s.333A, 2 years). (3) CDD is continuous — not a one-time onboarding exercise. (4) Know your role — every function has specific obligations within the three lines of defence. (5) The law protects you — safe harbour for honest good-faith reporting.
Reinforce: Filing a SAR that turns out to be unfounded is fine. Failing to file when you should have is a criminal offence. The system rewards those who speak up and punishes those who stay silent.
Transition: "Your AML journey does not end with this course."
Ongoing obligations: Annual refresher training is mandatory. Stay current with policy updates — the 2025 MLR amendments take effect in early 2026. Barclays refreshes its Compliance Risk Management Framework annually and out-of-cycle when needed. (Source: Barclays Compliance Framework)
ACAMS pathway: For those wanting to deepen expertise — the Certified Anti-Money Laundering Specialist (CAMS) is the global gold standard. 40 credits + active membership. 120 MCQ exam, 3.5 hours, at Pearson VUE. Four study areas. Cost: USD 2,095 (private sector). Recertify every 3 years (60 credits). (Source: ACAMS)
Closing: "Every SAR starts with one person noticing something. Every prevented crime starts with one person acting. That person could be you. Stay vigilant. Stay informed. Stay compliant."
Thank the audience and invite final questions.