Financial crime is a corrosive threat<\/a> that harms our communities and economy.<\/p>\n<\/blockquote>\n\n\n\n The program is backed by \u00a3520 million from the Economic Crime Levy, a further \u00a330m from the high streets package announced at Budget 2025, and more than 500 new officers. Sal Melki, the Deputy Director at the National Crime Agency (NCA), emphasizes the need for this scale. She notes, \u201cFinancial crime is a corrosive threat that harms our communities and economy. It undercuts legitimate business, deprives our public services and furthers the interests of nations hostile to the UK and our way of life.\u201d<\/p>\n\n\n\n Delivery will be structured via three pillars:<\/p>\n\n\n\n The new strategy aims to combine stronger enforcement with more proportionate regulation. The 2025 National Risk Assessment<\/a> still classifies the UK as a country with high money-laundering risk. While the government reports improving outcomes, it argues that criminal threats continue to evolve.<\/p>\n\n\n\n During 2025\/26, authorities disrupted more than 3,158 illicit finance systems, and recovered over \u00a3345.3 million in assets while returning \u00a326.1 million to victims. Moreover, criminal cash-intensive businesses have resulted in over \u00a310.7 million in suspected criminal funds seized or restrained.<\/p>\n\n\n\n Moving forward, the government aims to harmonize intelligence systems and sharing, as well as speed up asset-recovery processes. The government expects businesses to shift away from low-value activity. They must strengthen unified AML and fraud prevention controls.<\/p>\n\n\n\n It\u2019s important to note that the strategy is not a new AML regulation in itself. Businesses can expect more consultations, guidance, and legislation in the upcoming months. Existing obligations under the Money Laundering Regulations 2017 (MLR2017), as amended in 2026, the Proceeds of Crime Act 2002 (POCA), and sector-specific rules still remain.<\/p>\n\n\n\n However, there are several developments businesses should be tracking:<\/p>\n\n\n\n \u4ece 30 June 2026<\/a>, Enhanced Due Diligence (EDD) obligations have been narrowed to the Financial Action Task Force (FATF) \u201cHigh-Risk Jurisdictions subject to a Call for Action\u201d list. This means jurisdictions under the previous \u201cIncreased Monitoring\u201d list will not mandate EDD immediately. However, this does not mean a grey-listed jurisdiction is automatically low-risk.<\/p>\n\n\n\n What this means:<\/strong> Firms should amend country controls to differentiate between a regulatory trigger and a firm-specific risk trigger. AML teams must consider geographic risk, FATF evaluations, and their own customer and transaction risk assessment, with clear rules and an auditable reason for EDD escalation<\/a>.<\/p>\n\n\n\n The strategy specifically calls out the need to focus on high-impact risks<\/a>, without excessive compliance effort spent on low-risk customers or entities. Additionally, it encourages supervisors to discourage blanket or excessive controls and instead move to proportional measures.<\/p>\n\n\n\n What this means:<\/strong> An effective AML process should use the level of risk present to decide whether to route a customer to a particular journey. All escalation rules and compliance decisions must therefore trace back to the risk signal identified. This means more risk mapping and documentation on how the customer\u2019s risk was determined, why a check is proportionate, and what decision followed.<\/p>\n\n\n\n The Financial Conduct Authority (FCA) is due to publish its framework<\/a> around good and poor practice for AI in 2026\/27 and update its Financial Crime Guide with these examples. However, firms should not just wait for that guidance before establishing basic governance.<\/p>\n\n\n\n What this means:<\/strong> Mentioning that an AML provider \u201cuses AI\u201d will not translate to effective oversight. Where AI or machine learning is deployed in identity verification, fraud detection, and AML workflows, firms must understand and provide information on what data informs the system, how thresholds are controlled, where human intervention occurs, and whether decisions can be reconstructed. <\/p>\n\n\n\n![\"Heading](\"https:\/\/www.complycube.com\/wp-content\/uploads\/2026\/09\/uk-aml-guidance-2026-2029-1024x640.png\")
<\/figure>\n\n\n\n\n
\n
\n
Why Did The UK Publish a New AML Strategy?<\/h2>\n\n\n\n
What do Compliance Officers Need to Know Right Now?<\/h2>\n\n\n\n
1. Re-check your high-risk-country logic<\/h3>\n\n\n\n
2. Turn \u201crisk-based\u201d into something you can evidence<\/h3>\n\n\n\n
3. Get ahead of AI governance<\/h3>\n\n\n\n
![\"\u4f7f\u7528](\"https:\/\/www.complycube.com\/wp-content\/uploads\/2025\/04\/contact-complycube-award-winning-aml-and-kyc-1024x577.png\")
<\/a><\/figure>\n\n\n\n