MONZO BANK LIMITED

Assessment

Legal identity is VERIFIED against the UK statutory registry. Entity resolution is unambiguous: the registered name, number, incorporation date and address are consistent and the status is active. The material gap is not identity but regulatory status — the evidence set contains no FCA Financial Services Register extract.

Evidence

Key Findings

• Jurisdiction confidence is user-provided, but is independently corroborated by the Companies House record (an England & Wales registration with an England registered office). Treat GB as CORROBORATED.
• The company has been on the register for approximately 11.5 years as at the report date (18 August 2026). Longevity is a mild positive indicator against shell-entity risk.
• The word "Bank" in the registered name and the third-party reporting of FCA enforcement in Section 6 both imply PRA/FCA-authorised deposit-taking status. That implication is not evidence. The FCA Register was not queried in this assessment.

Risk Implication

For a counterparty presenting as a bank, verifying authorisation is a distinct control from verifying incorporation. Under UK MLR 2017 reg. 28 and the FCA's expectations on correspondent and institutional relationships, reliance on a regulated-entity status requires evidence of that status. Required next step: retrieve the FCA Register entry (FRN, permissions, any Part 4A requirements, VREQ/OIREQ restrictions) and the LEI. Absence of the FCA Register check also prevents confirmation of whether any regulatory requirement or restriction remains in force following the enforcement outcome discussed in Section 6.

Assessment

The officer layer is registry-confirmed and complete as supplied. The ownership layer is not. A single corporate Person with Significant Control is recorded, on a self-declared filing, with no registration number, no ownership percentage, no nature-of-control statement and no onward chain. The ultimate natural-person beneficial owners of MONZO BANK LIMITED are NOT ESTABLISHED in this evidence set.

Officers — CONFIRMED (Companies House officers register)

Note: "CONFIRMED" means the appointment appears on an authoritative registry. It does not mean the individual has been identity-verified by this assessment, nor does it imply anything about their PEP status (see Section 4 — that screen did not run) or their personal conduct.

Persons with Significant Control — DECLARED only

Key Findings

1. 1.The 25% threshold. Under the UK PSC regime and UK MLR 2017 reg. 5, a beneficial owner is a natural person who ultimately owns or controls, directly or indirectly, more than 25% of the shares or voting rights, or who otherwise exercises control. The recorded PSC is a legal person, so the regime requires the chain to be followed upward to natural persons. That has not been done here.
2. 2.Self-declaration is not verification. Companies House does not verify PSC filings for accuracy of substance. FATF Recommendation 24 and EU 5AMLD Article 30 both anticipate that registry data be supplemented, not relied upon alone.
3. 3.No missing-PSC or 'unable to identify' statement was retrieved either way; the evidence simply stops at the immediate corporate parent.
4. 4.No cross-directorship or group-structure mapping was performed. Relationships between the nine officers and Monzo Bank Holding Group Limited (or any wider group) are unknown.

Risk Implication

A one-level-deep, self-declared corporate PSC is a structural opacity gap, not an allegation of concealment. For a UK bank a widely-held holding-company structure with no single >25% natural person is entirely plausible and common; however, plausibility is not evidence. Until the chain is resolved, the firm cannot evidence compliance with MLR 2017 reg. 28(4) in respect of this counterparty.

This gap interacts with Section 3: sanctions screening was performed on the entity name only. Screening cannot be complete for ownership-based designations (e.g. OFSI/OFAC 50%-rule aggregation) while the natural-person owners are unidentified. It also interacts with Section 4: PEP screening of controllers cannot be scoped correctly without the ownership chain.

Required next steps: obtain the PSC statement in full including nature-of-control codes; identify Monzo Bank Holding Group Limited's registration number and its own PSC/shareholder register; map to natural persons or evidence a diversified shareholder base with no >25% holder.

Assessment

Screen status: RUN — genuine negative result.

The sanctions screen executed and returned no findings. Per the source ledger this is recorded as OK_EMPTY, expressly defined as "ran, genuinely found nothing (a real clean signal)." This is a true negative on the entity name, not a coverage gap. It is the reason the Sanctions & Watchlists factor scores 3/100 — the lowest of the seven weighted factors, carrying the highest applied weight (34.1%), and therefore the single largest downward pull on the composite.

Evidence

Scope Limitations — material

• Screening date not recorded. Under FCA SYSC 6.3 and UK MLR 2017 an audit trail must evidence when screening occurred. A result without a timestamp cannot be relied upon at a future review point. The report date is 18 August 2026; the screening date must be confirmed and logged.
• Officers and PSC were not evidently screened. The evidence records screening against the entity. There is no indication that the nine confirmed officers in Section 2, or the corporate PSC, were individually screened against sanctions lists.
• List coverage is narrower than best practice. No evidence of screening against the EU Consolidated List, Swiss SECO, Canadian, Australian or country-specific regimes, nor against UK/US export-control or debarment lists.
• 50%-rule / ownership-based exposure untested. As set out in Section 2, ultimate natural-person ownership is unresolved. Aggregated-ownership sanctions exposure therefore cannot be excluded.

Risk Implication

The clean entity-level result is genuine and material, and appropriately reduces risk. It must not, however, be presented internally as a completed sanctions control: the control is incomplete in subject scope (officers, PSC, ultimate owners) and list scope (EU/SECO and others). Extend screening to all Section 2 subjects and record the screening date before the file is signed off.

Assessment

Screen status: NOT RUN

No PEP screening was performed. The source ledger records: "No PEP screening provider configured [PEP] → SKIPPED". The coverage statement confirms PEP is a risk domain NOT reflected in the composite score.

Accordingly, this report makes no finding whatsoever on the PEP, RCA (relative or close associate) or HIO (head of international organisation) status of MONZO BANK LIMITED, of any of the nine registry-confirmed officers named in Section 2, or of the corporate PSC and its unidentified ultimate owners.

What this does and does not mean

Required Coverage — currently unmet

Risk Implication

FATF Recommendation 12 requires firms to have risk-management systems to determine whether a customer or beneficial owner is a PEP, and FCA SYSC 12.1 together with UK MLR 2017 reg. 35 requires senior-management approval and enhanced measures where a PEP relationship is identified. A file closed without any PEP determination on the controllers of a corporate customer is not compliant with those requirements, regardless of the composite score.

This gap compounds the ownership opacity in Section 2: even if a PEP provider were engaged today, correct scoping requires the ultimate beneficial owners to be identified first. The two remediation steps should be sequenced — resolve ownership, then screen the full controller population.

Required next step: engage a PEP data provider and screen (i) MONZO BANK LIMITED, (ii) all nine officers, (iii) Monzo Bank Holding Group Limited and (iv) any natural persons identified through the ownership chain. Do not finalise the CDD decision until this is complete.

Assessment

Adverse media screening ran via Google Programmable Search and returned 10 results: 1 adverse, 0 positive, 9 neutral. Severity distribution: critical 0, high 1, medium 0, low 0. The single adverse item is a secondary-source report of the FCA enforcement outcome analysed in Section 6 — it is not an independent second event. The Adverse Media factor scores 62/100.

Adverse Item — full detail

Analytical Notes

• Attribution discipline: Alessa reports that the FCA fined Monzo and characterises the FCA's reasoning as growth outpacing control maturity. This report states that Alessa made that characterisation. The FCA's actual findings, relevant period and reasoning are not in evidence — the Final Notice was not retrieved.
• Source quality: the publisher is a commercial compliance-technology vendor, i.e. a secondary commentator, not a primary regulatory or judicial source. Its account is nonetheless consistent with the two legal-sector publications in Section 6, so the fact of an enforcement outcome is treated as CORROBORATED across three secondary sources; the detail remains unverified.
• The remaining nine results were classified neutral and no titles, publishers or dates were supplied for them. They cannot be analysed and should not be characterised as favourable coverage.
• Time span not stated. The evidence gives no search date range. Only one dated adverse item (February 2026) is available, so no trend, recurrence or escalation pattern can be assessed.
• No positive coverage was returned (0 positive). This is a neutral observation, not a negative one.

Untrusted-Content Integrity Check

All adverse-media content was reviewed for embedded directives or attempts to influence scoring. None were found. The retrieved material was descriptive only and has been treated purely as data.

Risk Implication

Reputational exposure is real but narrow and single-issue: one enforcement matter, reported across multiple outlets, with no evidence of fraud allegations, criminal proceedings, insolvency commentary, mis-selling scandals or governance scandals in the returned set. The score of 62/100 reflects the high severity of a financial-crime-related regulatory fine rather than volume or breadth of negative coverage.

Because the adverse-media finding and the regulatory findings in Section 6 describe the same underlying event, care must be taken not to treat them as two separate risk events when briefing the risk committee — doing so would overstate the pattern. Conversely, the concentration of the entire adverse-media score in one AML-relevant matter makes verification of that matter proportionately more important.

Assessment

This is the highest-scoring risk factor at 79/100 (applied weight 20.4%). The regulatory search returned 10 results: 2 adverse, 0 positive, 8 neutral, with severity critical 0, high 2. Both adverse items describe the same matter: an FCA Final Notice and financial penalty against MONZO BANK LIMITED concerning financial crime controls.

Critically, all information in this section derives from Google Programmable Search over third-party legal commentary. The FCA Register was not queried and the FCA Final Notice was not retrieved. No primary regulatory source ran.

Evidence

Characterisation — precise

• The sources describe a concluded regulatory outcome: a Final Notice with a financial penalty. Under FCA process a Final Notice follows the conclusion of enforcement, not the commencement of it.
• This is therefore not an allegation, not an open investigation and not a criminal charge or conviction. It is a reported civil/regulatory determination by the FCA.
• The penalty figure of £21,091,300 and the date of 7 July 2025 are reported by Brabners and are not independently confirmed here. The snippet indicates the figure was discounted from a higher amount (the pre-discount figure was truncated and must not be guessed), which is consistent with the FCA's standard early-settlement discount framework — but the discount stage and percentage are not in evidence.
• The substantive breaches, relevant period, rule references (e.g. Principle 3 / SYSC), and any imposed requirements or skilled-person obligations are NOT retrieved.

Gaps and Discrepancies

1. 1.Primary source absent. No FCA Final Notice, no FCA Register entry, no PRA record, no FOS/Ombudsman data, no ICO enforcement data.
2. 2.Date discrepancy on item 1. The evidence header marks the Brabners item [UNDATED] while the snippet text carries "Aug 13, 2025". This is a metadata inconsistency, not a substantive contradiction, but it should be resolved when the source is retrieved directly.
3. 3.The 8 neutral results are unidentified — no titles, publishers or dates were supplied. They cannot be assessed and must not be treated as evidence of a clean regulatory record.
4. 4.No check for subsequent or concurrent action — nothing in the evidence establishes whether any other regulatory matter, requirement, variation of permission or ongoing supervisory intervention exists as at the report date of 18 August 2026.

Risk Implication

A reported FCA penalty exceeding £21m for financial crime control failings is directly relevant to the firm's assessment of Monzo as a counterparty, correspondent, introducer or supplier. Under UK MLR 2017 reg. 33 and FCA SYSC 6.3, a counterparty's own AML control weaknesses are a legitimate and required input into the risk rating of the relationship, particularly where reliance is placed on that counterparty's CDD.

Mitigating context that must be stated for balance: an enforcement outcome dated July 2025 relates to a historical control period, and the FCA's imposition of a penalty typically follows or accompanies a remediation programme. However, no evidence of remediation, of a skilled-person report, or of the closure of any imposed requirement is present in this evidence set. The risk assessment cannot credit remediation that has not been evidenced.

Required next steps (priority): (1) obtain the FCA Final Notice of 7 July 2025 from fca.org.uk; (2) retrieve the current FCA Register entry to confirm permissions and check for live requirements/restrictions; (3) obtain the firm's public statement or annual-report disclosure on remediation.

Assessment

The litigation screen ran and returned 10 results: 0 adverse, 0 positive, 10 neutral — severity critical 0, high 0, medium 0, low 0. The Litigation factor scores 25/100 (applied weight 11.4%), a mid-low score that appropriately reflects a null result obtained from a non-authoritative source rather than a verified clean court record.

Court records were NOT searched directly. The only source that ran in this domain was Google Programmable Search.

Evidence

Sources NOT consulted

• England & Wales Business & Property Courts / King's Bench Division filings
• Register of Judgments, Orders and Fines (CCJ register)
• The Gazette (insolvency, winding-up petitions, administration notices)
• Insolvency Service / Companies House insolvency filings
• Employment Tribunal decisions database
• Financial Ombudsman Service published decisions
• Competition Appeal Tribunal (relevant to consumer/class-style collective proceedings)

Pattern Analysis

No repeat-litigation pattern, class or collective action, or insolvency proceeding was identified. This is an absence of findings from a news-index search, not a verified absence of proceedings. For a retail bank with a large customer base, some volume of civil claims and Ombudsman complaints would be unremarkable and their non-appearance in a ten-result web search is uninformative rather than reassuring.

Risk Implication

No litigation-driven risk can be evidenced, and none can be excluded. The practical significance is limited relative to Section 6: the material legal-risk event in this file is the reported regulatory enforcement outcome, which is administrative rather than judicial. Where the relationship is material by value or reliance, a direct Gazette and CCJ-register search should be commissioned to convert this null result into a verified one.

Assessment

No dedicated ESG data source was consulted. No ESG ratings provider, sustainability-disclosure database, modern-slavery-statement registry, ICO breach register or NGO/whistleblower dataset was queried. The source ledger contains no ESG-specific source.

ESG is not a weighted factor in the risk model (see Section 11) and therefore contributes nothing to the composite score of 37/100. This section is narrative only.

Evidence Status by ESG Domain

Governance and Conduct — the one substantive signal

The only ESG-relevant evidence in the file sits in the G pillar and derives from Sections 5 and 6:

• Three secondary sources report that the FCA issued a Final Notice and a financial penalty of £21,091,300 on 7 July 2025 in relation to financial crime controls [Source: Brabners; Regulation Tomorrow; Alessa].
• Alessa characterises the driver as "rapid customer growth that outpaced the maturity of its controls" (https://alessa.com/blog/fca-reveals-costliest-enforcement-actions-of-2025/).

As a governance signal this indicates a period in which control investment lagged commercial expansion — a recognised conduct-risk pattern in fast-scaling regulated firms. It is a reported regulatory determination, attributed to its sources, and not an allegation of dishonesty, fraud or misconduct by any named individual. None of the nine officers identified in Section 2 is named in any of the returned sources, and no adverse inference about any of them is drawn or supported.

Countervailing Governance Indicators

• The Companies House officers register records eight directors plus a company secretary — a board of a size and composition consistent with a governed regulated entity rather than a thinly-staffed shell. This is an observation about structure, not an assessment of board effectiveness, which was not evaluated.
• The entity has an 11-year continuous active registration.

Risk Implication

Conduct risk is the live ESG issue and it is already captured, with greater rigour, in Sections 5, 6 and 11. The E and S pillars are wholly unassessed and must not be reported as clean. Where the firm's own ESG or reputational-risk policy requires an ESG position on material counterparties, a dedicated ESG screen must be commissioned — a null result from an AML-oriented web search does not discharge that obligation. Required next steps: query the ICO enforcement register, retrieve the entity's Modern Slavery Act statement, and obtain any published ESG/sustainability disclosure.

Assessment

This is a material due-diligence deficiency. The financial screen ran and returned 10 results: 0 adverse, 0 positive, 10 neutral, but no financial data of any kind was extracted into the evidence set. No revenue, turnover, total assets, capital position, profitability, funding round, investor or valuation figure is available.

No figure is stated in this section because no figure exists in the evidence. Constructing one from general knowledge would be a fabrication and is prohibited.

Evidence

Red-Flag Screen — outcome

Note on growth: the Alessa item in Section 5 refers to "rapid customer growth that outpaced the maturity of its controls" as the reported context for the FCA fine. This is a third-party characterisation of customer-base growth in a regulatory context, not a financial disclosure, and it is not evidence of unexplained or opaque growth in the AML sense. It should not be recorded as a source-of-funds red flag; it is a control-maturity observation and belongs to Sections 6 and 10.

Risk Implication

For a deposit-taking counterparty, financial standing is a core input to both credit and financial-crime risk. The complete absence of financial data means:

• Source of funds and source of wealth are undocumented, which is a gap against UK MLR 2017 reg. 28(11)(a) expectations for understanding the nature of the customer's business.
• No assessment of financial stress — a recognised driver of control-environment deterioration — is possible.
• The composite score does not contain a financial factor (see Section 11); this gap therefore reaches the score only indirectly via Transparency Risk (8/100), which arguably understates it.

Required next steps: obtain the most recent filed statutory accounts from Companies House for company number 09446231; obtain Pillar 3 / capital disclosures if the entity is confirmed as a PRA-authorised bank per Section 1; identify the shareholder base of Monzo Bank Holding Group Limited per Section 2.

Assessment

Jurisdiction Risk scores 35/100 (applied weight 6.8%) — the second-lowest weighted factor. The entity is incorporated and registered-officed in the United Kingdom, a jurisdiction with mature AML/CFT supervision. No offshore incorporation, no high-risk-jurisdiction nexus and no secrecy-jurisdiction structure was identified in the evidence.

Evidence

Reference Datasets — status

No dedicated jurisdiction-risk dataset was queried in this assessment.

Key Findings

• Jurisdictional risk for a UK-incorporated, UK-domiciled entity is inherently low on the incorporation dimension, and the 35/100 score is consistent with a baseline UK rating rather than with any identified adverse geographic factor.
• The operating footprint is unknown. A bank's geographic risk is driven far more by where its customers, correspondents and payment flows are than by where it is incorporated. That dimension is entirely unassessed.
• The parent's jurisdiction is unstated (Section 2). If Monzo Bank Holding Group Limited or any upstream holder is domiciled outside the UK, the jurisdictional profile would change.

Risk Implication

The low jurisdiction score is defensible on incorporation grounds but should be understood as narrow in scope. It does not represent an assessed view of the entity's cross-border exposure. Where the relationship involves payment flows, correspondent access or reliance on the counterparty's CDD, the firm should obtain the entity's own country-risk exposure profile and its policy on high-risk jurisdictions — particularly given the financial-crime control findings reported in Section 6.

Composite Result

Weighted Factor Table

Scores and applied (renormalised) weights are taken verbatim from the supplied risk-score block.

Calculation

Composite Score = Σ(Factor Score × Applied Weight)

``` Sanctions & Watchlists 3 × 0.341 = 1.023 Adverse Media 62 × 0.227 = 14.074 Regulatory & Enforcement 79 × 0.204 = 16.116 Litigation 25 × 0.114 = 2.850 Jurisdiction Risk 35 × 0.068 = 2.380 Transparency Risk 8 × 0.045 = 0.360

Composite 36.803 → 37 / 100 ```

Applied weights sum to 100.0%. Weights were renormalised across the six domains that ran; the PEP domain's headline weight was redistributed among them. The arithmetic reproduces the supplied composite exactly.

What Drives the Score

Elevated factors, with the specific evidence:

1. 1.Regulatory & Enforcement (79) — the dominant risk driver. Evidence: Brabners reporting an FCA financial penalty of £21,091,300 on 7 July 2025 (https://www.brabners.com/insights/business-crime-compliance/fca-enforcement-against-monzo-barclays-explained), corroborated by Norton Rose Fulbright's Regulation Tomorrow, 23 July 2025, referring to the publication of a Final Notice in respect of the Firm (https://www.regulationtomorrow.com/2025/07/financial-crime-controls-in-the-spotlight-lessons-learned-in-relation-to-fca-supervisory-powers-and-expectations/).
2. 2.Adverse Media (62) — driven by a single HIGH item covering the same underlying event (Alessa, 3 February 2026). The two factors are therefore not independent; the composite double-counts one real-world event across two domains. This is a property of the model, disclosed here so that the risk committee does not read it as two distinct enforcement matters.

Suppressing factors:

• The Sanctions factor carries the largest applied weight (34.1%) and scores only 3, contributing just 1.02 points. This single genuine clean result is what holds the composite in the Medium-Low band despite a 79 in the highest-severity qualitative domain.

Limitations on the Score — must be read with the number

• The score is partial. PEP is excluded outright (Section 4). A composite computed without a PEP determination on nine confirmed officers is incomplete against FATF R.12.
• Three factors rest on non-authoritative sources. Adverse Media, Regulatory & Enforcement and Litigation all derive solely from Google Programmable Search. No primary FCA, court or Gazette record was retrieved.
• Transparency Risk at 8/100 is arguably optimistic. It appears to reward registry completeness on identity and officers while not penalising the unresolved corporate PSC chain (Section 2) or the complete absence of financial data (Section 8). The score has not been adjusted — the supplied value is reproduced verbatim — but the divergence is flagged for the reviewer's judgement.
• Litigation at 25/100 reflects an unverified null, not a searched-and-clear court record.

Conclusion: 37/100 Medium-Low is arithmetically correct on the evidence supplied. It should be presented to any committee together with the two caveats that (i) PEP is unscreened and (ii) the highest factor score is uncorroborated against primary sources.

Recommendation

CDD Level: STANDARD CDD — conditional, with mandatory manual compliance review prior to sign-off.

Rationale

Supporting Standard CDD:

• Composite 37/100 (Medium-Low). Legal identity fully VERIFIED against Companies House (Section 1).
• Sanctions screening ran and returned a genuine clean result against OFAC, UK OFSI and UN lists (Section 3).
• No litigation, insolvency or criminal findings were identified (Section 7).
• UK jurisdiction, registry-corroborated, with no offshore nexus identified (Section 9).
• The one material adverse matter is a concluded regulatory outcome, not an open investigation, an allegation of criminality, or a matter implicating any named individual.

Arguing for uplift:

• PEP screening did not run (Section 4). This is a live non-conformity with FATF R.12 / FCA SYSC 12.1 that the score does not capture.
• Ultimate beneficial ownership is unresolved beyond a single self-declared corporate PSC (Section 2).
• The adverse matter is directly AML-relevant — financial crime systems and controls — and is recent (reported 7 July 2025, i.e. approximately 13 months before this report date).
• No financial data whatsoever was obtained (Section 8).

The balance adopted is Standard CDD gated on closing the two most significant gaps, rather than automatic EDD. Rejection is not recommended: the gaps are procedural and remediable, and MLR 2017 does not support de-risking on the basis of unretrieved data alone.

Outstanding Information Gaps

Required Actions

1. 1.Commission PEP/RCA screening on MONZO BANK LIMITED, all nine registry-confirmed officers, and Monzo Bank Holding Group Limited. Blocking — do not sign off without it.
2. 2.Retrieve the FCA Final Notice dated 7 July 2025 from fca.org.uk and record the actual penalty, breaches, relevant period and any imposed requirements. Blocking.
3. 3.Retrieve the FCA Financial Services Register entry to confirm FRN, authorisation scope and any live restrictions or requirements. Blocking.
4. 4.Extend sanctions screening to officers and the PSC, across EU Consolidated and SECO lists in addition to OFAC/OFSI/UN, and record the screening date.
5. 5.Resolve beneficial ownership to natural persons above the 25% threshold, or evidence that no such person exists.
6. 6.Obtain the latest filed statutory accounts for company number 09446231 and, if authorisation is confirmed, Pillar 3 capital disclosures.
7. 7.Obtain evidence of remediation following the reported enforcement — public statement, annual-report disclosure or skilled-person outcome.
8. 8.Document the MLRO decision, expressly recording that the composite score was produced on partial coverage.

Trigger Events for Immediate Review (ahead of the annual cycle)

• Any new FCA, PRA or ICO enforcement action, requirement, or variation of permission.
• Any sanctions designation touching the entity, its officers or its ownership chain.
• Any change of PSC, or any filing that alters the ownership chain.
• Resignation or removal of any of the nine confirmed officers in circumstances suggesting governance failure.
• Any insolvency, administration or winding-up filing, or any adverse change of Companies House status from 'active'.
• Any PEP match arising once screening is performed.
• Any credible media report of new financial-crime control failings.

Monitoring

Frequency: ANNUAL. Next scheduled review: 18 August 2027. Ongoing monitoring must include automated adverse-media and sanctions alerts; annual periodicity is appropriate for a Medium-Low counterparty only if event-driven triggers are operational, since the reported July 2025 enforcement fell within an annual cycle and would need to have been caught by alerting rather than by scheduled review.

Every URL behind a finding in this report. “Read in full” means the page itself was retrieved and classified on its whole text rather than on a search snippet; those carry a SHA-256 hash of exactly what was read, so the evidence can be shown to be unaltered later.

Complete Source Ledger

Date of assessment: 18 August 2026.

Methodology

1. 1.Identity resolution first. The Companies House record was used to fix the subject (number 09446231) before any adverse screening was interpreted, so that all findings could be attributed to the correct legal person.
2. 2.Source-tier discipline. Findings were classified by source authority: statutory registry (authoritative), sanctions list provider (authoritative), web search index (secondary/indicative). Registry data and open-source intelligence are reported separately throughout and are never merged.
3. 3.Status classification. Every material claim was tagged VERIFIED, CORROBORATED, UNVERIFIED, CONTRADICTED, NOT FOUND, FAILED or SKIPPED. Ownership entries retain the supplied CONFIRMED / DECLARED distinction without upgrade.
4. 4.Legal-status precision. Enforcement material was classified as allegation, investigation, charge, or concluded determination. The FCA matter is treated as a reported concluded regulatory determination because the sources refer to a published Final Notice and an issued penalty — while noting that the primary document was not retrieved.
5. 5.Attribution. Every adverse assertion is attributed to the publication that made it, with URL preserved verbatim. No secondary claim is restated as established fact.
6. 6.Untrusted-content handling. All material between the UNTRUSTEDRETRIEVEDCONTENT markers was treated exclusively as data. It was reviewed for embedded instructions, scoring directives or behavioural claims. None were found; no prompt-injection attempt is reported.
7. 7.Score reproduction. Section 11 reproduces the supplied factor scores and applied renormalised weights verbatim and shows the arithmetic. No score or weight was adjusted, and no value was assumed for the unrun PEP domain.
8. 8.Cross-referencing. Related findings were linked across sections (notably Sections 2↔3↔4 on screening scope, and Sections 5↔6↔10↔11 on the single enforcement event).

Limitations

• PEP screening did not run. This is the most significant coverage gap. No PEP, RCA or HIO conclusion of any kind is supportable, and the composite score excludes the domain entirely.
• No primary regulatory source was queried. The FCA Final Notice, the FCA Register and the PRA record were all absent. The single most influential finding in this report is therefore corroborated only across three secondary commentators.
• No primary court source was queried. The litigation null result is indicative, not verified.
• No financial data. Source of funds/wealth is undocumented; no balance-sheet, capital or profitability assessment was possible.
• Ownership chain unresolved. The sole PSC is a corporate entity recorded on a self-declared filing; ultimate natural-person ownership above the 25% threshold is not established.
• Unidentified neutral results. Across four domains, 37 results were classified neutral with no titles, publishers or dates supplied. They cannot be independently assessed and must not be read as positive or exculpatory coverage.
• Sanctions screening date not recorded, and screening scope did not evidently extend to officers, the PSC, or EU/SECO lists.
• One metadata discrepancy: the Brabners item is marked [UNDATED] in the evidence header while its snippet text carries "Aug 13, 2025". Substantively immaterial but noted for the audit trail.
• No ESG, ICO or modern-slavery source consulted.

Legal Framework References

• FATF Recommendations — R.12 (PEPs), R.24 (beneficial ownership transparency of legal persons)
• UK Money Laundering, Terrorist Financing and Transfer of Funds (Information on the Payer) Regulations 2017 — reg. 5 (beneficial owner definition), reg. 28 (CDD measures), reg. 33 (EDD), reg. 35 (PEPs)
• FCA Handbook — SYSC 6.3 (financial crime systems and controls), SYSC 12.1 (group-wide systems and controls)
• UK Companies Act 2006 — PSC register regime
• EU 5AMLD Article 30 (beneficial ownership registers) — referenced as a comparative transparency standard
• UK Modern Slavery Act 2015; UN Global Compact; TCFD; CSRD — referenced in Section 10 as unassessed frameworks

Confidence

Overall confidence: MEDIUM.

• HIGH confidence in entity identity, registration particulars and the officer list — all drawn directly from the UK statutory registry.
• HIGH confidence that the entity-level sanctions screen ran and returned a genuine null result.
• MEDIUM confidence in the existence of an FCA enforcement outcome — three independent secondary sources agree — but LOW confidence in the specific penalty amount, date and scope, none of which has been confirmed against the primary Final Notice.
• LOW confidence in the litigation null result, which rests on a web index rather than court records.
• NO confidence position is expressed on PEP status, financial standing, ultimate beneficial ownership, or ESG performance, because no adequate source ran in those domains.

Confidence is capped at MEDIUM principally by the unrun PEP screen and the absence of any primary regulatory source. Both are readily remediable, and completing the eight required actions in Section 12 would support an upgrade to HIGH.