MONZO BANK LIMITED

Assessment

Entity identity is VERIFIED against an authoritative registry with no ambiguity, no name variance and no status irregularity. The subject is a live, incorporated UK company. Separately, retrieved open-source material includes an FCA Financial Services Register URL for the same legal name, indicating FCA authorisation under reference number 730427; this is treated as corroborative but the Register record itself was not directly interrogated as a structured source.

Evidence

Key Findings

• The jurisdiction input was user-provided but is independently corroborated by the Companies House record (England) and the registered address; the jurisdiction assertion is therefore effectively verified rather than assumed.
• Gap: no SIC code, no LEI and no statement of regulated permissions scope was retrieved. The nature of the firm's activity is inferred from the legal name and the FCA Register URL, not from a structured field.
• Gap: the FCA Register snippet is undated. The authorisation status as at the report date (18 August 2026) has not been re-confirmed from the primary Register.

Risk Implication

For MLR 2017 regulation 28 purposes, the identification and verification of the legal person is satisfied by the registry record. However, the absence of a confirmed, dated permissions extract from the FCA Register matters: if the counterparty relationship depends on Monzo being an authorised credit institution (for example for reliance, correspondent-style arrangements, or simplified measures), that status must be evidenced from the Register on a dated basis. The reported enforcement action discussed in Section 6 makes the currency of that permissions check more, not less, important.

Assessment

Control at the level of the subject entity is well documented: nine directors and one company secretary are CONFIRMED from the Companies House officers register. Beneficial ownership, by contrast, is unresolved. The PSC register records a single corporate controller — Monzo Bank Holding Group Limited — as a DECLARED (self-filed, not independently verified) entry, with no ownership percentage and no onward chain. No ultimate natural person has been identified on the evidence held.

Registry-Confirmed Officers

Note: "CONFIRMED" here means the appointment appears on an authoritative registry. It does not mean any individual has been screened for sanctions, PEP status or adverse media. No director is asserted to be a beneficial owner; officer status and ownership are distinct.

Declared Ownership / Control

The 25% Threshold

Under the UK PSC regime and MLR 2017 regulation 5, a beneficial owner of a body corporate is, in broad terms, a person who directly or indirectly holds more than 25% of the shares or voting rights, or who otherwise exercises control over the management of the entity. On the evidence retrieved:

• No percentage figure is recorded for the declared PSC, so the threshold test cannot be arithmetically applied even at the first tier.
• The registers of Monzo Bank Holding Group Limited were not retrieved, so no second-tier controller — corporate or natural — has been identified.
• Consequently the file contains no confirmed UBO and no declared natural-person UBO.

Risk Implication

• FATF Recommendation 24 and EU 5AMLD Article 30 require adequate, accurate and current beneficial ownership information. A single corporate PSC with no onward chain does not satisfy that standard for CDD purposes; it satisfies only the company's own filing obligation.
• The opacity is structural rather than suspicious: a bank held by a named UK holding company is a conventional arrangement and there is no evidence of layering, offshore interposition or nominee use in this record. The risk is one of incomplete verification, which is why Transparency Risk still scores low (8/100) in Section 11.
• This gap interacts directly with Section 3 (no natural person has been sanctions-screened at the ownership level) and Section 4 (no natural person has been PEP-screened at all). Until the chain is resolved, neither screen can be described as complete for the ownership dimension.

Required Follow-Up

1. 1.Pull the Companies House record, PSC register and officers register for Monzo Bank Holding Group Limited and continue upward until natural persons or a listed/regulated parent are reached.
2. 2.Obtain a current shareholder register or confirmation statement showing percentages against the 25% threshold.
3. 3.Screen each identified natural person for sanctions and PEP status.

Assessment

Sanctions screening ran and genuinely returned no results. This is recorded in the source ledger as OK_EMPTY, which the methodology defines as a real clean signal rather than a coverage gap. No exact match and no possible/partial name match was returned for the subject entity.

Evidence

Key Findings

• The nil return applies, on the face of the evidence, to the entity name. The evidence does not state that the nine directors, the secretary, or the declared PSC (Monzo Bank Holding Group Limited) were individually screened.
• No EU consolidated list, no HM Treasury financial sanctions targets by regime breakdown, and no sectoral/investment-restriction list is named beyond OFAC, OFSI and UN. Screening against those three lists is a reasonable core set for a UK entity but is not exhaustive.
• The precise screening timestamp is not recorded. For audit purposes a dated screening artefact is required; the report date alone is insufficient evidence of when the list versions were queried.

Risk Implication

The nil sanctions result is the largest single downward driver of the composite score (factor score 3/100 at an applied weight of 34.1% — see Section 11). That weighting makes the integrity of this screen consequential: if the screen covered only the corporate name and not the natural persons and parent identified in Section 2, the comfort it provides is narrower than the weighting implies.

Under MLR 2017 and the Sanctions and Anti-Money Laundering Act 2018, screening obligations extend to beneficial owners and controllers, not only the contracting entity. The follow-up in Section 2 (resolving the ownership chain) is therefore a sanctions control step as well as an ownership step.

Screen status: NOT RUN

Assessment

No PEP screening was performed. The source ledger records No PEP screening provider configured [PEP] → SKIPPED. The coverage statement confirms PEP is among the "risk domains NOT reflected in the composite score". Accordingly:

• The subject entity has not been assessed for PEP-linked control.
• None of the ten registry-confirmed natural persons listed in Section 2 has been assessed for PEP, RCA (relative or close associate) or HIO (head of international organisation) status.
• No statement that any individual "is not a PEP" may be recorded on this file.

What Cannot Be Concluded

No inference is drawn from the individuals' names, roles or apparent seniority. Role-keyword inference is expressly not a substitute for screening and is not used here.

Risk Implication

• FATF Recommendation 12 requires firms to have risk-management systems to determine whether a customer or beneficial owner is a PEP, and to apply enhanced measures where they are. FCA SYSC 12.1 and MLR 2017 regulation 35 impose corresponding obligations, including senior-management approval and enhanced ongoing monitoring for PEP relationships.
• Because the screen did not run, the firm cannot currently demonstrate compliance with those requirements for this relationship. This is an audit-visible control gap, not a residual-risk judgement.
• The composite score of 38/100 in Section 11 was calculated with the PEP weight redistributed across the domains that did run. The score is therefore arithmetically correct but domain-incomplete, and should not be presented to a risk committee as a full-coverage result.
• The unresolved ownership chain in Section 2 compounds this: even if a PEP screen were run today on the ten known officers, no natural-person owner exists on the file to screen.

Required Action

1. 1.Configure or manually invoke a PEP/RCA/HIO data source.
2. 2.Screen: MCCULLAGH, Paul; BURBIDGE, Eileen; DIAS, Valerie Michelle; KEELEY, Rupert Graham; LAYFIELD, Diana Louise Patricia; MCBAIN, Fiona Catherine; NEWBERY, Mark; PALANIAPPAN, Jambu; WICKER-MIURIN, Jane Fields — and any natural persons identified above Monzo Bank Holding Group Limited.
3. 3.Record the screening date, provider, list version and match disposition for each name.
4. 4.Re-run the composite score once the domain is populated.

Assessment

Adverse media screening ran via Google Programmable Search and returned 10 results: 2 adverse, 0 positive, 8 neutral, with severity distribution critical 0 / high 2 / medium 0 / low 0. On analysis, only one of the two "high" items is genuinely adverse content; the second is the firm's own FCA Register authorisation page and appears to be a classification artefact. The genuine adverse theme is singular and consistent: reported FCA enforcement concerning financial crime controls, which is analysed in full in Section 6.

Evidence

Key Findings

• Single adverse theme. The only substantive adverse-media allegation type is regulatory/AML-control failure. There is no retrieved reporting of fraud by the entity, sanctions evasion, bribery, market abuse, insolvency, consumer-detriment litigation or management misconduct.
• Outcome, not allegation. Item 1 does not report an allegation; it reports that the firm "was fined" — i.e. a determined regulatory outcome. It is attributed to a compliance-vendor blog, which is secondary reporting of an FCA action, not the FCA's own publication.
• The narrative attributed to the FCA — that customer growth outpaced control maturity — is a characterisation made by the publisher (alessa.com) summarising the FCA's position. It is reported as such and is not asserted here as an established regulatory finding; the primary Final Notice was not retrieved.
• Score inflation. Because item 2 is not adverse, the Adverse Media factor score of 66/100 (22.7% applied weight) rests materially on one genuine article. Analysts should treat the 66 as an upper bound on the media signal.
• Zero positive coverage was returned. This is a search-coverage characteristic rather than a reputational finding; the searches were adverse-oriented.

Coverage and Limitations

• Source: Google Programmable Search only. No licensed adverse-media database (e.g. structured negative-news screening with entity resolution and dedicated AML taxonomies) was queried.
• Time span: the two adverse items are dated 2026-02-03 and undated respectively. No systematic date range was applied or disclosed, so the period actually covered by the search is unknown.
• Language: no evidence of non-English media coverage being searched.
• Depth: only the two most severe of two adverse items were surfaced; the eight neutral items were not itemised, so they cannot be independently reviewed for latent adverse content.

Risk Implication

Reputationally, the exposure is concentrated in one publicly reported regulatory outcome rather than dispersed across multiple conduct themes — a materially better profile than the raw "2 high-severity adverse" count suggests. However, the reliance on general web search rather than a structured negative-news provider means the absence of other adverse themes is NOT FOUND, not absent. For an entity of this profile, a licensed negative-news screen should be run before the file is signed off. This finding is developed further in Section 6 and feeds the composite in Section 11.

Assessment

This is the highest-scoring risk domain (79/100, applied weight 20.4%). Two independent professional publishers report that the FCA took enforcement action against Monzo Bank Limited in July 2025 in relation to financial crime controls, including the issue of a Final Notice and a financial penalty of £21,091,300 (reported as discounted from a higher figure). The primary FCA Final Notice was not retrieved and no FCA-published document is in the evidence set. The action is therefore reported as a regulator determination as described by secondary sources, pending primary verification.

Evidence

Analytical Points

1. 1.Characterisation discipline. The reporting describes a completed enforcement outcome (Final Notice + penalty), which is the strongest category in the allegation→investigation→charge→determination hierarchy. It is nonetheless reported at one remove. The correct internal formulation is: "Two legal/compliance publishers report that the FCA fined Monzo Bank Limited £21,091,300 on 7 July 2025 in connection with financial crime control failings; the Final Notice has not yet been obtained."
2. 2.Subject-matter relevance is direct. The reported failings concern financial crime systems and controls — precisely the domain that governs whether a counterparty's own CDD output can be relied upon. This is materially more relevant to an AML file than, for example, a prudential or consumer-redress matter would be.
3. 3.The "discount" reference in the Brabners snippet is consistent with the FCA's standard early-settlement discount practice, but the pre-discount figure was truncated in the retrieved text and must not be reconstructed or estimated.
4. 4.No evidence of an ongoing investigation, restriction, requirement, variation of permission, or director prohibition was retrieved. Equally, none was searched for. The absence is NOT FOUND, not none.
5. 5.Firm remains authorised. The FCA Register snippet indicates continued authorisation (FRN 730427), which is consistent with a financial penalty rather than a permission withdrawal — but the snippet is undated and does not confirm status as at 18 August 2026.

Risk Implication

• Direct AML consequence: where a firm intends to rely on Monzo under MLR 2017 regulation 39, or to place reliance on its onboarding/monitoring output, documented evidence of remediation of the reported control failings should be obtained. Reliance is not prohibited by an enforcement action, but a reasonable-grounds assessment must take it into account.
• Recency: the penalty is reported as July 2025, approximately thirteen months before the report date. This is recent enough to remain live for risk-appetite purposes and to warrant confirmation that remediation is complete.
• Cross-reference: this is the same underlying event as adverse-media item 1 in Section 5; the two domains are not independent signals and the composite in Section 11 should be read with that correlation in mind.

Required Action

1. 1.Retrieve the FCA Final Notice from fca.org.uk and record its date, reference, findings, penalty and any undertakings.
2. 2.Check the FCA Register for current permissions, requirements and any restrictions as at the review date.
3. 3.Search the PRA's enforcement publications separately — the PRA was not queried.
4. 4.Obtain, where the relationship justifies it, the firm's remediation status or independent-reviewer attestation.

Assessment

The litigation search ran and returned 10 results, all classified neutral (0 adverse, 0 positive; critical/high/medium/low all zero). No litigation, insolvency proceeding, class action, judgment or winding-up petition was identified. This is a NOT FOUND result from a general web search engine, not a clearance from court records.

Evidence

Sources NOT Consulted

The following primary and quasi-primary sources were not searched. Their absence is the material limitation of this section:

• HM Courts & Tribunals Service records / court records were not searched directly.
• The Registry Trust register of County Court Judgments.
• The Insolvency Service individual and corporate insolvency registers (beyond the Companies House status field).
• The Financial Ombudsman Service decisions database (relevant for a consumer-facing bank).
• Upper Tribunal (Tax and Chancery) references, which is where FCA enforcement decisions may be challenged. Given the reported Final Notice in Section 6, the absence of a Tribunal search is a specific, named gap: a Final Notice ordinarily indicates the matter was concluded rather than referred, but that inference is not evidenced here.

Risk Implication

For an entity of this type and size, a genuine absence of any civil litigation would be unusual; the nil return is more plausibly a function of search-tool coverage than of a litigation-free history. The correct compliance position is that litigation exposure is unassessed, not that it is nil. The Litigation factor was nevertheless scored 25/100 with an applied weight of 11.4% (Section 11) — a low-but-not-zero score that appropriately reflects an unadverse but shallow search rather than a verified clean record.

No insolvency risk indicator was identified, and the Active registry status is inconsistent with insolvency proceedings, so no immediate escalation arises from this section.

Assessment

No dedicated ESG data source was consulted. The source ledger contains no ESG, sustainability, modern-slavery, labour-rights, environmental or data-protection screen. The only conduct-related signal in the entire evidence set is the reported FCA financial crime control enforcement analysed in Section 6, which is a governance/conduct matter rather than an environmental or social one.

Evidence

Key Findings

• The single material conduct finding is the reported financial-crime-controls enforcement. Framed in ESG terms this is a governance deficiency as characterised by third-party reporting of a regulator's determination, not an environmental or social one.
• The presence of nine directors, including individuals whose appointments are registry-confirmed, indicates a board of conventional size for a UK bank. No conclusion is drawn about independence, committee structure, tenure or effectiveness — none of that data was retrieved.
• No whistleblowing, employment-tribunal, discrimination or data-protection matter was identified. Because none of those sources was queried, this is NOT FOUND, not a clean ESG record.

Risk Implication

ESG and conduct risk is materially unassessed. For institutional counterparty onboarding this may be acceptable if the firm's ESG policy does not require a dedicated screen at this risk tier; if it does, the file is incomplete. Note that ESG is not a weighted factor in the Section 11 model — it influences the score only indirectly and, in this case, does not influence it at all. Reviewers must not infer ESG comfort from the composite score of 38/100.

Under the UK Modern Slavery Act 2015 s.54, entities above the turnover threshold must publish an annual statement. Turnover was not retrieved (Section 8), so applicability cannot be determined.

Assessment

No financial data was obtained. The financial search ran and returned 10 results, all neutral, but the evidence set contains no revenue, turnover, asset, capital, profit/loss, funding-round, investor or valuation figure. This is a material due diligence deficiency for a deposit-taking institution and is recorded as such.

Evidence

Red-Flag Screen

The standard financial red flags cannot be tested on this evidence, and are expressly not ruled out:

• Negative net worth — untested; no balance sheet retrieved.
• Rapid unexplained growth — untested. Note the indirect signal in Section 5/6: alessa.com states the firm was fined "following rapid customer growth that outpaced the maturity of its controls". That is a control-maturity characterisation attributed to a publisher, not a financial-statement finding, and it is not treated here as evidence of unexplained growth or of financial irregularity.
• Opaque funding — untested; the ownership chain above Monzo Bank Holding Group Limited is unresolved (Section 2), so the funding structure is not visible.

Source of Wealth / Source of Funds

For a corporate customer that is an operating regulated business, source of funds is normally evidenced by trading activity and audited accounts. Neither has been obtained. Accordingly:

• Source of funds: UNVERIFIED.
• Source of wealth (of ultimate owners): NOT ASSESSABLE, because no ultimate natural-person owner has been identified.

Risk Implication

A bank counterparty file without any financial evidence cannot support credit, prudential or AML risk-appetite decisions. Under MLR 2017 regulation 28(4) the firm must understand the nature of the customer's business; without accounts or a permissions extract this understanding is inferred rather than evidenced. Note that this gap does not appear as a weighted factor in Section 11 — the model has no Financial Profile factor — so the composite score of 38/100 does not penalise it at all. Reviewers must not read the score as implying financial comfort.

Required Action

1. 1.Obtain the latest filed statutory accounts from Companies House (filing history was not retrieved).
2. 2.Obtain the annual report / Pillar 3 disclosures if published.
3. 3.Record capital and liquidity position from an authoritative source if the relationship is credit-bearing.

Assessment

The only jurisdiction evidenced is the United Kingdom (England) — country of incorporation per Companies House, corroborated by the registered address in London EC2A and by the FCA Register reference. The Jurisdiction Risk factor was scored 35/100 (applied weight 6.8%), a low-to-moderate baseline. No operating jurisdictions outside the UK were identified, and equally none were searched for.

Evidence

Key Findings

• No reference dataset was actually consulted. The Jurisdiction Risk score of 35/100 is a model-assigned country baseline. No FATF publication, no EU high-risk third country list and no Transparency International CPI edition appears in the source ledger. No CPI score or FATF listing status is stated in this report because none was retrieved — inventing one would be a fabrication.
• Single-jurisdiction profile on the evidence held. There is no indicator of offshore incorporation, secrecy-jurisdiction structuring, or high-risk-country nexus in the retrieved record.
• Unassessed dimension: a UK retail bank may hold customer, payment-corridor or correspondent exposure to higher-risk jurisdictions. That transactional geography is entirely outside the scope of what ran and is a known blind spot, not a clean finding.

Risk Implication

The UK is a FATF member with a mature AML/CTF regime, and a UK-incorporated, UK-regulated counterparty presents a comparatively low inherent jurisdictional risk. However, the score in Section 11 is not evidenced by a named dataset, and the report cannot cite FATF or CPI positions it did not retrieve. If the relationship involves cross-border payment flows, the geographic risk assessment must be redone on transactional data rather than on incorporation jurisdiction alone.

Assessment

The composite score is 38/100, band Medium-Low, on PARTIAL coverage. The score is produced from six of the model's seven weighted factors; the Politically Exposed Persons factor did not run and contributes nothing. Weights have been renormalised across the domains that ran, so the applied percentages sum to 100%.

Scoring Table

Calculation

Composite Score = Σ(Factor Score × Applied Weight)

• Sanctions & Watchlists: 3 × 0.341 = 1.023
• Adverse Media: 66 × 0.227 = 14.982
• Regulatory & Enforcement: 79 × 0.204 = 16.116
• Politically Exposed Persons: not run = 0.000 (no weight applied)
• Litigation: 25 × 0.114 = 2.850
• Jurisdiction Risk: 35 × 0.068 = 2.380
• Transparency Risk: 8 × 0.045 = 0.360

Sum = 1.023 + 14.982 + 16.116 + 2.850 + 2.380 + 0.360 = 37.711 → 38/100

Applied weights sum check: 34.1 + 22.7 + 20.4 + 11.4 + 6.8 + 4.5 = 99.9% (rounding of published percentages; the underlying renormalisation sums to 100%).

What Drives the Score

Elevated factors, with the specific evidence behind each:

1. 1.Regulatory & Enforcement (79) — the reported FCA Final Notice and £21,091,300 penalty of 7 July 2025 concerning financial crime systems and controls [Brabners; Regulation Tomorrow, 2025-07-23]. This single event supplies 16.1 of the 37.7 composite points — approximately 43% of the total score.
2. 2.Adverse Media (66) — driven by reporting of the same event [alessa.com, 2026-02-03], plus one misclassified neutral item. Contributes a further 15.0 points, approximately 40% of the total.

Correlation warning: the two highest-contributing factors are not independent. Together they account for roughly 82% of the composite, and both trace to one underlying regulatory action. A committee reading the 38 as reflecting multiple distinct risk vectors would be misreading it; the profile is better described as one significant, recent, reported regulatory event against an otherwise clean registry and sanctions picture.

Suppressing factors: the genuine nil sanctions result (3/100 at the heaviest applied weight of 34.1%) and the very low transparency risk (8/100) are what hold the composite in the Medium-Low band.

Coverage Qualification

This is a PARTIAL-coverage score. The PEP domain is not reflected in it.

The following limitations mean the composite must not be presented as complete:

• PEP: NOT RUN. No provider configured. Ten registry-confirmed natural persons unscreened.
• Financial Profile: no data retrieved. Not a weighted factor, so the score is entirely insensitive to this gap (Section 8).
• ESG & Conduct: no dedicated source consulted. Not a weighted factor (Section 10).
• Beneficial ownership: no ultimate natural person identified. Reaches the score only through Transparency Risk, where it is scored at 8/100 (Section 2).
• Primary regulatory record: the FCA Final Notice itself was not retrieved, so the highest-weighted adverse input rests on secondary reporting.

Band Mapping

The supplied band is Medium-Low. The reporting taxonomy offers LOW / MEDIUM / HIGH / CRITICAL / UNDETERMINED. MEDIUM has been selected as the conservative mapping, on the basis that (a) a recent reported regulatory penalty for financial crime control failings is present, and (b) a mandatory screen (PEP) has not run. Reporting LOW would misrepresent both.

Recommendation

Standard CDD (consistent with the model output; EDD required: NO), subject to the mandatory completion of the gap-closing actions below before final file approval. Manual compliance review is recommended at sign-off because of the reported regulatory enforcement and the unrun PEP screen — this is a review requirement, not an escalation to EDD.

Escalation to a senior compliance decision-maker is required if, and only if: the PEP screen returns a positive or possible match on any officer or identified owner; or the FCA Final Notice, once obtained, discloses ongoing requirements, restrictions or unremediated failings materially beyond what the secondary reporting describes.

Relationship rejection is not supported by the evidence. The entity is an active, FCA-authorised UK bank with a genuine nil sanctions result and no identified litigation or insolvency exposure. Information gaps alone do not justify refusal.

Rationale

Important qualification on reliance: if the intended relationship involves reliance on Monzo's own CDD under MLR 2017 regulation 39, or outsourcing/agency arrangements touching financial crime controls, Standard CDD on the entity is not sufficient. The reported control failings must be assessed and documented remediation evidence obtained, because reliance requires reasonable grounds to believe the third party applies adequate measures.

Outstanding Information Gaps

1. 1.PEP/RCA/HIO status of all ten registry-confirmed officers and any owner — no provider configured.
2. 2.FCA Final Notice (primary document): date, reference, findings, penalty, undertakings.
3. 3.Current FCA permissions extract, dated — the retrieved Register snippet is undated.
4. 4.Ownership chain above Monzo Bank Holding Group Limited to ultimate natural persons, with percentages tested against the 25% threshold.
5. 5.Ownership percentage attaching to the declared PSC (not stated on the filing as retrieved).
6. 6.Filed statutory accounts / financial statements — none retrieved.
7. 7.Court records — not searched directly; only general web search ran.
8. 8.PRA enforcement record — not searched.
9. 9.ESG / modern slavery / ICO data-breach position — no dedicated source consulted.

Required Actions

1. 1.Commission and document a PEP/RCA/HIO screen on all named natural persons; record provider, list version, date and disposition. Do not close the file as PEP-clear until this is done.
2. 2.Obtain and file the FCA Final Notice from the FCA's own publication, and reconcile the penalty figure of £21,091,300 reported by Brabners against the primary text.
3. 3.Take a dated FCA Register extract confirming authorisation, permissions and any requirements or restrictions as at the review date.
4. 4.Resolve the ownership chain above Monzo Bank Holding Group Limited; screen every natural person identified against sanctions and PEP lists.
5. 5.Obtain the latest filed accounts from Companies House to close the Section 8 deficiency.
6. 6.Run a licensed negative-news screen to replace reliance on general web search (Section 5), and correct the internal classification of the FCA Register page from HIGH-adverse to neutral.
7. 7.Where reliance under reg 39 is contemplated, obtain documented remediation evidence before approval.
8. 8.Record in the file that PEP screening was not performed at the date of this report, so that the coverage gap is audit-visible.

Monitoring & Review

• Monitoring frequency: ANNUAL (as per the model output).
• Next scheduled review: 18 August 2027.
• Interim re-review trigger events:
• Any new FCA, PRA or overseas regulatory action, requirement, restriction or variation of permission.
• Publication of any further FCA Final Notice or enforcement outcome naming the entity.
• Any change in the PSC register, or resolution of the ownership chain revealing a new controller.
• Departure or appointment of directors where the individual is a PEP or subject to adverse findings.
• Any sanctions designation affecting the entity, its parent or any identified controller.
• Any credible report of insolvency, resolution action, capital shortfall or material litigation.
• Completion of the PEP screen, which requires the composite score to be recalculated on full coverage.

Every URL behind a finding in this report. “Read in full” means the page itself was retrieved and classified on its whole text rather than on a search snippet; those carry a SHA-256 hash of exactly what was read, so the evidence can be shown to be unaltered later.

Assessment Date

18 August 2026. Individual source query timestamps were not supplied in the evidence and are therefore not stated. The sanctions screening date in particular is unrecorded (see Section 3).

Complete Source Ledger

No source in the ledger returned a FAILED status. All configured sources executed. The single unrun screen is PEP, which was SKIPPED because no provider was configured.

Methodology

1. 1.Registry-first identity resolution. Legal identity was established from Companies House and treated as the anchor record. Open-source material was used only to corroborate, never to establish, identity.
2. 2.Evidence tiering. Every assertion was tagged VERIFIED / CORROBORATED / UNVERIFIED / NOT FOUND / NOT CONSULTED / SKIPPED. Registry data and open-source intelligence were kept strictly separate.
3. 3.Verification-status discipline on ownership. "CONFIRMED" was applied only to authoritative-registry appointments; the PSC entry was reported as DECLARED (self-filed) throughout and never described as verified.
4. 4.Attribution of adverse content. Every adverse assertion is attributed to the publisher that made it, with URL and date preserved. The reported FCA penalty is described as a regulator determination as reported by named secondary sources, because the primary Final Notice was not retrieved.
5. 5.Classification challenge. Automated severity classifications were reviewed rather than accepted. The FCA Register page classified as HIGH-adverse was reassessed as a neutral record and the score-inflation effect disclosed (Sections 5 and 11).
6. 6.Score reproduction. The composite was recomputed from the supplied factor scores and applied (renormalised) weights and reconciled to 37.711 ≈ 38. No score or weight was altered.
7. 7.Untrusted content handling. All material between the UNTRUSTEDRETRIEVEDCONTENT markers was treated as data. It was inspected for instruction-like content; none was found, and no directive, scoring request or behavioural claim was present. No injection red flag arises. Had any been present it would have been reported as a red flag and disregarded.
8. 8.Non-inference rule. Where a screen did not run, no substitute inference was drawn from names, roles or sector norms. This applies specifically to the PEP domain.

Limitations

• PEP screening did not run. This is the single most consequential limitation. The composite score excludes the domain entirely.
• The primary FCA Final Notice was not obtained. The highest-weighted adverse input in the model rests on two secondary publishers. The pre-discount penalty figure was truncated in the retrieved snippet and is unknown.
• No ultimate beneficial owner identified. Ownership terminates at a declared corporate PSC with no stated percentage.
• No financial data whatsoever. Financial standing, capital position and source of funds are unevidenced.
• Court records not searched directly. The nil litigation return derives from web search only and cannot support a clearance.
• No jurisdiction reference dataset consulted. FATF, EU high-risk-country and TI CPI positions are not stated because they were not retrieved.
• No ESG source consulted.
• Adverse-media search depth and date range undisclosed, and only English-language general web search is evidenced.
• FCA Register snippet is undated, so current authorisation status as at 18 August 2026 is not confirmed.
• One classification defect identified in the retrieved data (FCA Register page scored as HIGH-adverse), which inflates the Adverse Media factor.

Legal & Regulatory Framework Referenced

• UK Money Laundering Regulations 2017 — reg 5 (beneficial ownership), reg 27–28 (CDD), reg 35 (PEPs), reg 37 (SDD), reg 39 (reliance on third parties).
• FCA Handbook — SYSC 6.3 (financial crime systems and controls), SYSC 12.1 (group-wide systems and PEP-related expectations).
• FATF Recommendations — R.10 (CDD), R.12 (PEPs), R.24 (transparency and beneficial ownership of legal persons).
• EU 5AMLD Article 30 (beneficial ownership registers); EU 6AMLD (predicate offences and liability).
• Sanctions and Anti-Money Laundering Act 2018 (UK financial sanctions framework).
• UK Modern Slavery Act 2015 s.54; TCFD; CSRD; UN Global Compact — referenced in Section 10 as unassessed frameworks.

Confidence

Overall confidence: MEDIUM.

Supporting the confidence level: identity is verified from an authoritative registry with no ambiguity; officers are registry-confirmed; the sanctions screen genuinely ran and returned a real nil result across three major list sets; the principal adverse finding is corroborated by two independent professional publishers; and the composite arithmetic is fully reproducible.

Constraining the confidence level: one mandatory screen (PEP) did not run; the primary document underpinning the largest adverse input was not retrieved; beneficial ownership does not reach a natural person; no financial data was obtained; litigation was tested only by web search; and jurisdiction scoring is not dataset-backed. Confidence would rise to HIGH on completion of the PEP screen, retrieval of the FCA Final Notice, and resolution of the ownership chain.