What the regulator asks a firm to have #
The SRA's anti money laundering guidance and support, updated 8 September 2026, sets out the framework a firm is expected to operate:
- A firm wide risk assessment, which the SRA says must take the sector level assessment into account
- Policies, controls and procedures
- Client and matter risk assessment
- Client due diligence
- Source of funds, and where relevant source of wealth
- Staff training, with a checklist published by the SRA
- Independent audit of the framework
Every item on that list produces artefacts, dates and evidence. That is the administrative weight of AML, and it exists whether or not a single suspicious matter ever crosses the desk.
What a new client actually sets off #
In a firm of a handful of fee earners, opening a matter typically means:
-
A conflict check across current and former clients
The first of the invisible steps in opening the matter.
-
Identity evidence for the client, and for anyone else involved
-
A client and matter risk assessment
-
Source of funds enquiries
Which the SRA says should start early.
-
A client care letter and terms of business
Sent, and then returned signed.
-
Costs information
Which the Code of Conduct requires both at engagement and as the matter progresses.
-
Complaints information in writing
Including the right to complain to the Legal Ombudsman.
-
File opening in whatever systems the firm runs
Note how many of those are blocked on somebody outside the firm. The individual steps are understood by everybody in the building.
What is usually missing is a single, current answer to "what is this one waiting on", which is why the same question is asked at every supervision meeting.
The three costs nobody counts #
Re-collecting the same facts
A client supplies their details on an enquiry, again for identity evidence, again on a client care letter and again when the file is opened. None of that is judgement. It is the same facts, re-entered, with a new opportunity for a discrepancy each time.
Establishing state
Answering "has this one cleared onboarding" is usually done by opening an inbox. In a firm taking on new matters every week, that reconstruction happens many times per matter.
Dead waiting
A client care letter that has not come back costs nothing while somebody is watching it and a great deal when nobody is.
Rules and judgement, separated #
Runs on rules
- Knowing which onboarding steps a matter type needs
- Knowing which of them are done, open or stalled, if status is recorded once
- Knowing which evidence is approaching an expiry or review date
- Carrying the same facts between documents
Needs a fee earner
- Setting a client or matter risk rating
- Deciding whether an explanation of funds is satisfactory
- Deciding whether to act for the client at all
- Deciding whether to report a suspicion
The firm owns the rating, the funds decision carries legal consequences, and the report is a named person's responsibility.
The reason to draw that line clearly is not efficiency. It is that a person who spends their week gathering documents is not spending it thinking about risk, and the second activity is the one the regime actually exists for.
Where this page stops #
It will not tell you that any arrangement satisfies the Money Laundering Regulations or the SRA's expectations. The SRA supervises the firm, its findings are made against the firm's own risk assessment, and an audit trail produced by a tool is not a defence for a decision that should not have been made.
Anything handling identity documents also engages UK GDPR, and that assessment is the firm's too.
What holds up is the diagnosis. The evidence gathering around AML is a dated list of artefacts and statuses, and dated lists are the most mechanical work in any business. For the sharper end of the same problem, read chasing ID and source of funds, and if you want a number, the cost of admin time calculator is the place to start.