Risk Management

Handy Hints for those new to the role of a COLP and MLRO in a law firm

New to the role of COLP and MLRO?

Firstly, if you’re new to the role of a compliance officer in your law firm, congratulations! If you’re the MLRO or the COLP, which are key positions in a law firm, getting to grips with our Handy Hints will help you stay on top of regulatory expectations and best practices.

If you haven’t downloaded already, our Guide to Source of Wealth & Funds for Law Firm Compliance is a must have.

Here are some of our key tips, plus practical guidance written for you, if you’re new to the role in a law firm in England or Wales.

As MLRO, your primary duties include:

  • Receiving and assessing Suspicious Activity Reports (SARs) from staff
  • Deciding whether to report suspicions to the National Crime Agency (NCA)
  • Keeping a clear and auditable record of decisions
  • Ensuring compliance with the Money Laundering Regulations 2017 (as amended)
  • Keeping up-to-date with Sanctions Regimes (especially in light of post-Brexit UK sanctions)

As COLP, your duties include:

  • Ensuring compliance with the SRA Code of Conduct and SRA Principles
  • Reporting serious compliance breaches to the SRA
  • Acting as the firm’s ‘whistleblower’ for misconduct

If you don’t already have a TOOLKIT then you can get hold of our TEAL TRACKER HERE which will get you off to a great start.

five star testimonial for Teal Compliance

Some key documents and sources you must be familiar with:

  • The Money Laundering, Terrorist Financing and Transfer of Funds (Information on the Payer) Regulations 2017 (as amended)
  • Proceeds of Crime Act 2002 (POCA) – especially on offences like failure to report and tipping off
  • SRA’s Anti-Money Laundering (AML) Guidance
  • Legal Sector Affinity Group (LSAG) AML Guidance – this is tailored for law firms
  • Sanctions and Financial Crime Guidance from the Office of Financial Sanctions Implementation (OFSI)

3. Risk Assessment & Client Due Diligence (CDD)

  • Ensure your firm-wide AML risk assessment is up-to-date
  • Make sure your firm is risk-based – i.e., clients, transactions, and matters are assessed for risk at the outset and on an ongoing basis
  • Implement proper Know Your Client (KYC) checks – ID verification, beneficial ownership checks, source of funds/wealth assessments
  • Make use of electronic verification tools, but don’t rely on them alone
  • High-risk clients (PEPs, high-net-worth individuals, complex structures) require enhanced due diligence (EDD)
  • Have a clear matter risk assessment process that all fee-earners follow

4. SARs & Internal Reporting

  • Train staff on how to spot red flags (e.g., unusual payments, urgent last minute changes in payments, complex company structures, reluctance to provide information)
  • Have a clear SAR reporting process – encourage staff to report suspicions internally first (to you as MLRO)

If you file a SAR to the NCA, remember:

  • You mustn’t tip off the client
  • You may need a Defence Against Money Laundering (DAML) before proceeding with a transaction
  • Keep a clear record of why you did/didn’t report

 

HOW WE CAN SOLVE YOUR COMPLIANCE HEADACHES

 

  • AML SORTED Programme (for medium to large sized law firms) CLICK HERE
  • AML SORTED Programme (for small law firms) CLICK HERE
  • Regulatory SORTED Programme (for medium to large sized law firms) CLICK HERE
  • Regulatory SORTED for Small Firms Programme (for small law firms) CLICK HERE

5. Training & Staff Engagement

  • Provide regular AML training for all fee-earners and staff
  • Training should be practical – use real-life examples of risks in legal work
  • Ensure all new joiners get AML training as part of induction
  • Encourage an open culture where staff feel comfortable raising concerns

6. Staying Compliant with the SRA

  • Be prepared for SRA AML Audits – they’ve increased spot checks on firms
  • Ensure your Policies, Controls, and Procedures (PCPs) are documented and kept up-to-date
  • If you’re ever unsure about an issue, document your reasoning before making a decision
  • Keep a register of AML breaches and near-misses
  • Attend their Compliance Conference each year

AML AUDITS WITH TEAL COMPLIANCE

 

7. Managing Stress & Your Own Risk

  • Keep an audit trail of key AML decisions – this protects you if questioned by the regulator
  • Use external resources and networks – join MLRO/COLP forums for peer support
  • If in doubt, seek external legal or compliance advice rather than making risky decisions alone
  • LawCare is the legal sector’s charity, supporting us in our roles in law firms. Their helplines are confidential, if you’re struggling with stress please contact them. They’re excellent and all the volunteers on the helplines have either worked in law, or still do, i.e. they “get it”.

READ THIS ARTICLE FOR FURTHER INSIGHTS

House purchase source of funds and wealth due diligence for AML compliance

Need Help?

Did you know that Teal provides specialist training to both COLPs and MLROs? If you want to find out more, simply GET IN TOUCH HERE.

Streathers Solicitors testimonial and review for Teal Compliance

New to the role of COLP and MLRO? Read More »

How to master the tricky world of source of funds and wealth

How to Master the Tricky World of the Source of Funds and Wealth

AML compliance can feel like walking a tightrope, right? Especially when it comes to a client’s source of funds and wealth. It’s a balancing act: you need to be flexible enough to handle all sorts of clients, but you also need a rock-solid strategy for managing risk. 

At Teal Compliance we hear that it can be hard to have the conversation around source of funds and source of wealth with a well paying existing client, or those who have a high net worth. 

If you haven’t downloaded already, our Guide to Source of Wealth & Funds for Law Firm Compliance is a must have.

Here are my thoughts on how law firms should nail the risk-based approach to source of funds and wealth verification, keeping you compliant without slowing things down.

Think of your clients and transactions like a deck of cards – some are higher risk than others. Maybe you’ve got clients from countries with shaky AML rules, or maybe their business structure is a bit of a maze. 

Whatever the reason, I suggest you begin by categorising them.

Once you’ve sorted them, decide what level of due diligence each category needs. Basic checks for some, the full nine yards for others. And don’t forget to keep your toolkit updated! Regulations change, the market shifts, and new risks pop up all the time.

If you don’t already have a TOOLKIT then you can get hold of our TEAL TRACKER HERE which will get you off to a great start.

Certain transactions, like residential conveyancing (a classic money laundering route as you will know) and corporate acquisitions, just scream “high risk.” For these, you need clear, standardised policies. 

Within your AML Policy, you should spell out exactly what you consider is acceptable proof of source of funds and wealth. For example, if funds are coming from somewhere from a sale being handled by another law firm you may want your fee earners to get a completion statement from the law firm along with a bank statement from the client to show the funds being deposited. You should also build flexibility into your policy too because what happens when a transaction throws you a curveball? Your policy should tell you how to handle it.

Our SORTED Programmes can help you spot the gaps in your compliance and fix them.

Step 3: Train Your Team – Make Them Risk Detectives!

Handling High-Risk Transactions

Your team needs to be sharp when it comes to risk. I can’t emphasise enough how your training should be FIRMWIDE. 

From your MLROs and COLPS to your receptionists, each one should be able to spot risk at the start a new client onboarding process and a new transaction, whilst keeping an eye on it during ongoing monitoring, and double-check everything whilst having the confidence to ask for help or back up if they need it. No fear culture is seriously important.

And here’s my pro tip: document everything. Why did they assess the risk the way they did? Write it down. It not only protects your firm but also shows you’re serious about compliance. Your PII firm will appreciate your documented communications and it will help should you ever get a visit from your regulator.

 

HOW WE CAN SOLVE YOUR COMPLIANCE HEADACHES

 

  • AML SORTED Programme (for medium to large sized law firms) CLICK HERE
  • AML SORTED Programme (for small law firms) CLICK HERE
  • Regulatory SORTED Programme (for medium to large sized law firms) CLICK HERE
  • Regulatory SORTED for Small Firms Programme (for small law firms) CLICK HERE

The UK Bank Account Myth: Don't Get Caught Out!

Let’s bust a myth that’s been doing the rounds for way too long: just because money’s in a UK bank account doesn’t mean it’s clean. Big banks have been in hot water for money laundering, so don’t assume anything.

 

Myth #1: UK Bank Account = Clean Money

Nope. Even the most reputable banks can have dirty money flowing through them. Just because it’s in a UK account doesn’t automatically make it legit.

  • Action: Always do your own due diligence on the source of funds, no matter where they’re held. Trace the money back to its origin and make sure the client’s story matches the documents.

Myth #2: The Bank’s Already Checked It

Maybe the bank did file a Suspicious Activity Report (SAR), but they might still have to release the funds. It doesn’t mean you’re off the hook.

  • Action: Treat every transaction like it’s brand new. Even if a bank has cleared the funds, your firm needs to verify the source and make sure everything is AML-compliant.

Bottom Line: Don’t fall for the UK bank account myth! It’s a trap. By understanding the limitations of relying on bank checks and doing your own thorough due diligence, you can keep your firm safe.

House purchase source of funds and wealth due diligence for AML compliance

In conclusion....

If you find you are procrastinating from having that awkward conversation with a client (or indeed that well paying existing or high net worth client) about having to do some comprehensive checks as to where their funds are coming from, you can simply blame it on legislation! Come what may, you, as a solicitor, compliance officer, CILEx lawyer, paralegal, Senior Partner…have to adhere to the AML regulations by performing comprehensive checks to authenticate identities, proof of address, and source of funds and wealth. 

Would you rather have a short, possibly tricky conversation with a client, or potentially face a serious consequence (no one wants a huge fine or go to prison). 

As an example, if you are a conveyancer, you have to follow the rules to make sure the money used to buy a property isn’t from the proceeds of crime. It’s not just about ticking boxes for your law firm, you have to be smart and proactive in the fight against financial crime. 

Let’s be honest, nobody wants their firm involved in money laundering. That’s where risk assessments come in. They’re like a health check for your business, helping you identify potential vulnerabilities so you can take action. By understanding the risks, you can put smart controls in place and keep things running smoothly (and legally!).

It’s never too late to get compliant, and it’s definitely never too early to begin the process.

You can email me directly, or any of my team to find out how Teal can help support you, your reputation and your clients.

Please remember that Teal Compliance is your go-to AML and Risk Management Partner and we have a variety of packages available to support you, your colleagues and of course, your clients!

To find out more, click HERE and come what may, we look forward to supporting you soon.

SORTED: Compliance Services 

Training and Education

Ask Teal: Consultation Services

Legal Compliance Audit

Policy Review & Writing Services

Website Audit Services

Teal Tracker

Let us support you, your team and your clients.

How to Master the Tricky World of the Source of Funds and Wealth Read More »

Laptop with the Teal Tracker's Root Cause Analysis Process on screen

The Teal Tracker’s New Feature: Root Cause Analysis Process

The Teal ‘Root Cause Analysis Process’, or ‘RCAP’, is a new, groundbreaking feature of the Teal Tracker. Here we explain what it does, how it works and how it can benefit you. 

What does the Root Cause Analysis Process do?

The Root Cause Analysis Process forms part of the Incident Management module in the Teal Tracker, and is a yet another example of how law firms can use their compliance data to help reduce the future risk of claims, complaints and breaches.

At its core, it assists in identifying trends and reducing incidents through identification, analysis and learning, which will in turn protect clients, the firm and the team.

How does the Root Cause Analysis Process work, and how is AI involved?

The RCAP feature uses AI to assist firms in identifying root causes of issues or near misses. It forms part of the Teal Tracker’s Incident Management module, whereby firms can analyse incidents to drill down to root cause.

As with all our new features in the Teal Tracker, we’ve extensively asked our law firm partners how they would best like to see this work in practice, so its design is simple and intuitive.

Teal Tracker subscribers are invited to carry out a Root Cause Analysis Process using the ‘five whys’ methodology principle, which is a standard engineering concept developed way back in the 1950’s for Toyota’s production line. It is, at its core, really simple. The principle is that if you ask ‘why’ something went wrong five times, you’ll likely drill down to arrive at the core answer.

But the Teal RCAP combines this tried and tested practice with AI to generate the next response to each of the ‘five whys’ questions and to confirm the root causes and their weightings. This smartly assists users in drilling to the key root cause or causes, and skillfully assists law firms in getting to the true root cause and the granular detail of issues.

This is then automatically exported to the Teal Tracker’s management reports functionality. In turn, this allows trend analysis to be systematically identified in detail, and reflected back to the firm to ensure they can both learn and improve in the key areas they really need to focus on.

Why has Teal integrated AI into the Root Cause Analysis Process?

Teal has integrated generative AI into the solution so that AI can smartly create the next drill down question to ultimately display what has actually happened and its cause. This means users have smart options to drill down into the issues and figure out what precisely occurred and what contributed to each particular problem.

It will give the firm much more useful and intelligent data on which to make decisions or to deploy resource. This will assist in better use of budgets for training or capacity as well as ultimately reducing the number of claims, complaints and breaches that occur.

How is the Root Cause Analysis Process working in practice?

Teal has been trialling the solution in full, in live environments for some time and it’s working extremely well. That’s why we’re now proud to be able to roll-out this groundbreaking feature to all our Teal Tracker law firm partners. 

Want to know more about the Teal Tracker?

At Teal, we’re here to support your journey towards compliance that works. Our compliance technology platform, Teal Tracker, is the solution to your compliance issues, ensuring you, your firm and your clients are safe. 

To find out more about the Teal Tracker, or to book a demo, contact our team today!

The Teal Tracker’s New Feature: Root Cause Analysis Process Read More »

Image of laptop on a desk, with the Teal Tracker on the screen

Why we built the Teal Tracker compliance technology

The Teal Tracker compliance technology platform is the solution for all law firms’ compliance needs. Here, we explain why we built the Teal Tracker, and how it’s benefiting law firms. 

What is the purpose of the Teal Tracker?

The Teal Tracker compliance technology has two core purposes.

1. Keeping track of all your records

The Teal Tracker’s first core purpose is to make the activity of collating law firm compliance information easier.

Firms know when there are issues, and there’s usually a procedure for notifying someone. However, it’s often done via email, or by filling in a form and then emailing it to someone. This is how control can be lost and it becomes just another email stuck in someone’s inbox. This makes such records extremely hard to demonstrate to a regulator.

Examples might be a list of complaints, where somebody then has to sit down for hours, scrolling through emails and trying to find the relevant ones.

In practice, and in reality, there are still examples of printing off documents and putting them in paper files. However, this is inefficient, lacks security and could compromise confidentiality.

So, this is the primary reason the Teal Tracker was built.

2. Analysing the data to help you make informed decisions

The second core reason we built the Teal Tracker compliance technology is because there’s a lot of beneficial information contained within the data that you collect as a result of breaches, file reviews or training records. This data holds the answers to enable you to start to identify when there are problems with a particular person, or a particular area within the firm.

Because the data is fragmented, normally across the firm in emails, folders or on bits of paper, it usually can’t be analysed. As a result, firms don’t really have a good handle on whether their compliance is working or not.

The Teal Tracker is the solution. Once the data is collected in the Teal Tracker, it can then start to analyse and report on it. This will enable you to identify issues and let you know where the areas of focus need to be.

For example, if there’s a spike in complaints as a result of somebody not getting back to people, that may be a capacity issue. Through the Teal Tracker, we can let you know that a particular department appears to be quite busy, needs more people, or needs less work.

With the methods law firms currently use, this can be guesswork to a degree. The Teal Tracker provides evidence for these things, so that you can make informed decisions.

How do law firms benefit from the Teal Tracker?

Law firms can benefit from the Teal Tracker in a number of ways. However, here are the top 5 benefits of the Teal Tracker:

1. Collecting all information in one place, without duplication

First of all, the activity of collecting information from the business in relation to their compliance can be streamlined. A really simple example of that is what we collect through our ‘Incident Management’ module, called ‘what’s happened?’.

The ‘what’s happened’ form is what you’d usually call an ‘incident reporting form’. We’ve named it ‘what’s happened’ on purpose, to engage people, so that they use it more freely. 

We’re curious about why things are happening and encourage everyone in the business to use it for anything they see that’s not going to plan, without any inherent blame attached. In the ‘what’s happened?’ form, you select the category of what’s happened, for example, a complaint, a potential claim, a breach, or a near miss. It then automatically populates a register. If you’re currently collecting that information by email from people within your firm, you’ll have to copy it onto a register. 

2. Easy access to reports and analytics

Once that information is properly captured within the Teal Tracker, it can start to easily analyse the data and reflect that back to you to let you know. On the first page of the Teal Tracker, you’ll find the ‘heat map’. The heat map is designed so that you have access to instant and continuous visibility of the situation. You’ll instantly be able to recognise if you have any emerging issues that you need to start dealing with, and you can run various reports which you can also tailor.

The reports will show up on your desktop enabling you to know what to prioritise, as we understand that budgets and compliance resources are always really tight.

3. Helps prioritise your budget

Firms spend a lot of money on compliance interventions. If you’re looking for solutions, training, writing a new policy or rolling out a new procedure, you might not feel confident that it’s actually working. The Teal Tracker solves this problem.

It shows you what is and what isn’t working, both systemically and individually. As the Teal Tracker is reflecting back into the business, you can then make informed decisions as to where to put your money to derive the highest impact and benefit, reduce the highest risks, and affect your highest priorities.

4. Protecting sensitive compliance information

When we collect compliance information, it’s sensitive by its very nature. You need to ensure access rights are robust, as it could be training records, training plans, staff development needs, suspicious circumstances, or reports that the business is surfacing. You need to control who has access to that information and where it sits.

If a suspicious circumstances report is sent via a paper form or an email to the MLRO, it can end up setting in an inbox or being filed on the client file. This means other staff may have access to it.

If a suspicious circumstances report is submitted, it’s likely that you’ll stop working on that file for a period of time. If the client gets frustrated and makes a complaint, there’s a number of potential serious consequences that can occur if the report is on the client file. 

For example, if you’ve made a report out to the police, the tipping off events under the Proceeds of Crime Act could kick in. If the client calls to ask why is nobody ringing them back, and one of your staff sees on the file that you’re waiting to hear from the National Crime Agency, they could accidentally reveal this to the client. This is something that’s so easily done in innocence. 

When building the Teal Tracker, we thought about how can we give firms a safe place to put that information, where they can limit and control the access to who can see it, and prevent it from accidentally be filed anywhere it shouldn’t.

5. Access to a wealth of compliance training

If you choose the Teal Tracker compliance technology for your law firm, you’ll also have access to Teal College

Teal College has a vast amount of training courses in AML, GDPR and Regulatory Compliance in addition to Teal TV, which hosts webinars and videos to help your law firm stay compliant and protected. 

Get in touch

The Teal Tracker is here to revolutionise the way compliance works in law firms, keeping you, your firm and your clients safe. For more information or to book a demo, simply get in touch with our experts today.

Why we built the Teal Tracker compliance technology Read More »