Customer Risk Assessment: How to Avoid FCA Fines and Strengthen AML Controls

Customer Risk Assessment for Challenger Banks: Avoid FCA Fines with Stronger AML Controls

In a high-profile enforcement action, the UK Financial Conduct Authority (FCA) fined a prominent challenger bank £21,091,300 for serious failures in its anti-financial crime systems and controls. The fine covers deficiencies between October 2018 and August 2020—a period of rapid growth where compliance failed to keep pace. This is a major FCA fine against a UK challenger bank that has brought customer risk assessment into a  sharp focus. As banks and financial institutions scale, failing to implement robust AML controls can result in severe fines and long-term reputational damage.

• Why financial crime compliance matters more than ever

As digital banks continue to redefine the future of finance, regulators are tightening their grip on how these institutions manage risk. The recent £21M fine issued by the FCA to a UK challenger bank is more than just a headline — it’s a powerful reminder that AML and CDD controls must scale as fast as the business itself.

📈 Rapid Growth, Lagging Controls

The bank’s customer base exploded from around 600,000 in 2018 to over 12 million by April 2025. However, its AML and financial crime compliance infrastructure did not scale accordingly.

Following FCA intervention, the bank was forced to implement a comprehensive financial crime change programme, overhauling its onboarding and transaction monitoring frameworks. Only after meeting the regulator’s expectations was the Voluntary Requirement—a restriction on onboarding certain customers—lifted in February 2025.

❌ Key Failures Identified

1. Inadequate Customer Due Diligence (CDD)
The bank’s onboarding systems failed to collect and validate enough customer information. In some cases, customers used clearly fictitious or implausible addresses such as “Buckingham Palace” and “10 Downing Street”.

2. Weak Risk Assessment and Monitoring
The bank lacked effective tools for transaction monitoring and customer risk profiling, limiting its ability to detect and respond to suspicious activity.

3. Non-Compliance with FCA Restrictions
Despite a regulatory requirement issued in August 2020 to stop onboarding high-risk customers, the bank opened accounts for over 34,000 such individuals through to June 2022.

🌍 Broader Implications for the Industry

This case is a wake-up call for all fast-growing financial institutions. The FCA has made it clear: financial crime prevention is a non-negotiable priority—and firms must ensure their controls evolve alongside their customer base.

Failure to do so doesn’t just result in fines. It can also mean:

• Onboarding restrictions
• Increased regulatory scrutiny
• Severe reputational damage

Regulatory Context: What the FCA Expects

The FCA has made it clear that financial institutions must maintain proportionate, risk-based systems and controls to detect and prevent financial crime—especially as they grow. Under the UK’s Money Laundering Regulations (MLRs), firms are required to perform adequate customer due diligence (CDD), assess risk dynamically, and conduct ongoing monitoring throughout the customer relationship.

What is a Challenger Bank ? 

Challenger banks are a sub-sector of retail banks that aim to reduce the market concentration of traditional high street banks through the use of technology and more up-to-date IT systems. Digital challenger banks have the following common features in their business models: they primarily offer personal current accounts, they operate without a branch network, and they provide financial services through smartphone apps.

What is a Voluntary Requirement VREQ ?

A Voluntary Requirement (VREQ), like the one imposed on this bank, is a regulatory tool used by the FCA to restrict certain business activities—often as a response to significant control failures. In this case, it prevented the bank from onboarding high-risk customers until it could prove its systems were improved.

The message is clear: rapid growth is no excuse for weak compliance. AML frameworks must scale with your business. Failure to do so risks not only heavy fines but also long-term operational limitations and reputational damage.

Our Take

A robust customer monitoring solution could have saved this bank a fortune

Effective customer risk assessments and real-time monitoring are critical not only for regulatory compliance, but for maintaining the trust of customers, partners, and regulators.

If you’re scaling your operations, make sure your compliance framework—especially onboarding and ongoing monitoring—scales with you.

How DX can help:

At DX, we deliver a robust and scalable Customer Monitoring and Ongoing Screening solution tailored to your organization’s unique risk appetite and regulatory landscape. Whether you’re onboarding new clients or monitoring an existing customer base, our platform empowers you to perform accurate, dynamic risk assessments—for both individuals and businesses—throughout the entire customer lifecycle.

Built for Scale. Designed for Precision and Scale

Our High-Volume Screening & Risk Classification Engine is engineered to seamlessly process large populations of customers, enabling efficient onboarding and risk reassessment at scale. With flexible, customizable risk thresholds and logic, the system adapts to your internal policies and evolving regulatory demands.

Key capabilities include:

• Batch screening of millions of customers with minimal disruption

• Ongoing monitoring with automatic detection of risk changes

• Auto-escalation workflows for rapid case handling

• Support for both individual and corporate profiles

From initial onboarding to daily operations, DX ensures you’re equipped to identify high-risk customers, adapt to changing risk factors, and meet compliance requirements—without overloading your teams.

Stay ahead of regulatory scrutiny. Scale your compliance operations with confidence.
That’s the DX advantage.

Don’t let weak monitoring cost you millions. See how DX can help and book your Demo