
Contents
- 1Why keeping pace with financial compliance is getting harder
- 2The regulations your financial services team must be trained on in 2026
- 3Why traditional compliance training keeps producing the same gaps
- 4How microlearning fixes financial compliance training
- 5Five practical steps to update your financial services compliance training program
- 6How 5Mins supports financial services compliance training
- 7Financial services compliance training FAQs
Keeping a financial services team current on compliance means treating training as a running process, not an annual event. The FCA fined firms £186.4 million in 2024/25, up from £42.6 million the year before, and its 2025 AML cases turned on controls that staff didn't apply. Map your obligations by role, refresh what changes, and keep records that show who learned what and when.
- Enforcement is rising. FCA financial penalties reached £186.4 million in 2024/25, against £42.6 million in 2023/24.
- The law names training in places. Regulation 24 of the Money Laundering Regulations 2017 requires staff to be made aware of the law and regularly trained to spot suspicious activity.
- Consumer Duty is a role-by-role training job. It has applied to open products since July 31, 2023 and to closed products since July 31, 2024.
- SM&CR is being reformed, not removed. The FCA's Conduct Rules guidance expects role-relevant training that is reinforced regularly.
- Long annual modules miss the point. Short, spaced lessons and clear records give you training you can defend.
- Five steps keep you current. Map exposure, prioritize by risk, choose content that stays current, automate the admin and build your audit trail early.
£186.4 million. That is what the FCA imposed in financial penalties in 2024/25, according to its own enforcement data. The year before it was £42.6 million. Much of the jump reflects a backlog of older cases finally closing, so don't read it as a permanent new baseline. It still shows where a regulator's attention goes.
In 2025 three big AML cases landed. The FCA fined Monzo £21.1 million in July for financial crime control failings between 2018 and 2022, with onboarding controls that didn't keep pace with growth. Barclays Bank PLC was fined £39.3 million that month over its handling of a corporate client's money laundering risk, and Barclays Bank UK PLC a further £3.1 million for failings around a client money account. In December, Nationwide was fined £44.1 million for inadequate financial crime systems and controls between October 2016 and July 2021, including missed chances to spot a customer using personal accounts to receive fraudulent furlough payments.
Those are control failures at large firms, and training isn't the only fix. But each one involved people who had to spot a warning sign and act on it. If you lead HR, L&D or compliance in a UK financial services firm, this guide covers the rules your people need to know, why annual modules keep leaving gaps, and a five-step plan for staying current.
Why keeping pace with financial compliance is getting harder
Since 2022, financial services teams have absorbed the Consumer Duty, changes to the Senior Managers and Certification Regime, updates to the money laundering rules and continuing conduct obligations. They have done it with workforces that are spread across branches, home offices and time zones.
Training teams feel this most. By the time a module has been built, reviewed and deployed, the guidance it covers may have moved on. And a regulator won't accept "it was accurate when we built it" as a defense if your people are applying last year's rule.
A second pressure sits with named individuals. Under SM&CR, a senior manager answers for their area of responsibility, and the FCA can fine and prohibit individuals as well as firms. A senior manager's best protection is evidence that they took reasonable steps, and a current training record for their team is part of that evidence.
Firms that cope well treat compliance training as a continuous operating function with an owner, a schedule and a change log. They don't run it as an annual administrative task.
The regulations your financial services team must be trained on in 2026
Each of the following is live and needs ongoing training, not one-time certification. For each, here is what "up to date" means in practice.
FSMA is the base of UK financial regulation. It sets the regulatory perimeter and the powers of the FCA and PRA, and most specific rules sit on top of it. Managers need a working grasp of it so they can apply the detailed rules properly. A one-hour induction module won't give them that.
Source: legislation.gov.ukThe MLRs 2017, as amended, require firms to run customer due diligence, monitor transactions and keep records. Regulation 24 deals with people directly. A firm must take appropriate measures so that relevant staff are made aware of the law on money laundering, terrorist financing and proliferation financing, and are regularly given training in how to recognize and deal with suspicious transactions and activities. It must also keep a written record of the measures it takes, particularly the training given.
Source: legislation.gov.uk, regulation 24Suspicious activity reporting sits in the Proceeds of Crime Act 2002, so AML training should link the two: what a red flag looks like, how to escalate it internally and what the firm's reporting route is. Content built in 2021 or 2022 and never reviewed isn't good evidence that you're meeting a duty to train "regularly".
The 2025 cases make the point. In the Nationwide case, the FCA found the firm missed opportunities to spot fraudulent furlough payments passing through personal accounts. In Monzo's, controls lagged behind growth. Whatever the systems did or didn't flag, someone had to notice and act, and good training builds that judgment.
The Duty sets a higher standard of care for retail customers, built around four outcomes: products and services, price and value, consumer understanding and consumer support. The rules came into force on July 31, 2023 for open products and services and on July 31, 2024 for closed ones. Conduct Rule 6 also applies where a firm's activities are covered by the Duty.
Source: FCA, PS22/9The training challenge is different from most compliance topics. You can't teach a fixed rulebook and stop. People from product design to the contact center need to know what a good outcome means in their own role and be able to judge it. That calls for scenario-based, role-specific training that you revisit as the FCA publishes its findings.
The Duty came into force in 2023 and many firms built their training then. If yours hasn't been reviewed since, check it against the FCA's current Consumer Duty pages and its latest published findings.
The regime has three parts: the Senior Managers Regime, the Certification Regime and the Conduct Rules. It exists to encourage personal responsibility and to make clear who does what. Phase 1 reforms were finalized by the FCA and PRA in April 2026. The Treasury has said it plans to legislate to remove the Certification Regime, including annual recertification, from primary legislation, with no date set yet.
Source: FCA, SM&CRThe FCA's Conduct Rules guidance is the most useful source for trainers. It expects training that is relevant to the person's role, interactive and built on realistic scenarios, reinforced regularly and built into onboarding, with its effectiveness assessed. It also expects relevant senior managers to be involved in oversight of the training. It lists simple computer-based training with little tailoring to role as a warning sign.
Until the reforms land, keep individual records at the level of the person: what they covered, when, and how it relates to their role.
Financial services firms hold account details, transaction histories and credit records. Anyone who handles personal data needs current GDPR training, and in this sector that means almost everyone.
Source: ICO guidanceWhere data protection meets the Consumer Duty's focus on vulnerable customers, firms get real ambiguity. Training the two topics in silos leaves a gap, so build at least one scenario that covers both.
Other obligations to cover
- Market conduct and transaction reporting. For investment firms, the rules on reporting, conflicts of interest and client suitability need regular refreshers, because reporting errors usually come from setup and review processes rather than one person's mistake.
- Sanctions. Staff in onboarding, monitoring and relationship roles need to know what triggers a match against the UK sanctions list, what enhanced due diligence involves and how to escalate. Priority goes up for any firm with international clients.
Why traditional compliance training keeps producing the same gaps
The FCA has been flagging AML control weaknesses for years, and the same themes keep appearing in enforcement outcomes. Most compliance teams understand what the rules require. The delivery model is where it breaks. Four problems keep recurring.
Completion on a legacy LMS is under 5%. Make training mandatory and chase it, and the number rises but the learning can get rushed. A 90-minute AML module clicked through in 28 minutes gives an auditor a certificate and gives the business no extra knowledge.
Traditional modules are built in cycles of drafting, legal review, upload and rollout. If that takes months, a module deployed in January can be out of date by spring. Firms often find out only when a regulator asks.
A spreadsheet of completion dates shows who clicked through. It doesn't show which version of a rule they were trained on, or how the training links to their role. Regulation 24 asks for a written record of training given, so the record matters in its own right.
Mandatory modules are easy to leave open in one tab while you work in another. That's a format problem more than a motivation problem.
The FCA's own guidance points the same way. It asks for training that is interactive, scenario-based and reinforced regularly, with its effectiveness assessed. A long annual module doesn't fit that description.
How microlearning fixes financial compliance training
Microlearning breaks compliance content into microlessons of about 5 minutes. Each covers one regulation, one concept or one procedure in enough depth to be useful. That matches what the FCA says it wants, and it fixes the four problems above in specific ways.
- Completion you can stand behind. 5Mins delivers 95%+ completion. A short AML red-flags lesson that sits in a learner's feed on Monday morning is easy to open and quick to finish before the first meeting.
- Faster updates. When a rule or guidance changes, a short microlesson is far quicker to revise than a 90-minute module, so refreshed training can reach staff much sooner. 5Mins compliance content is kept up to date as regulations change.
- Retention built for real situations. People meet compliance questions under pressure: a transaction that looks odd, a customer request that raises a Consumer Duty issue. The spacing effect is well established in learning research, and information revisited at intervals is retained better than information taken in one block.
- A format that fits a spread-out workforce. Learners watch in the browser or on the 5Mins iOS and Android apps, and microlessons work offline in the app, so they fit commutes, gaps between calls and branch shifts.
Traditional training vs microlearning
| Factor | Legacy LMS | |
|---|---|---|
| Lesson length | Microlessons of about 5 minutes | Long modules |
| Completion | 95%+ | Under 5% |
| Compliance content | Kept up to date as regulations change | Varies by platform |
| Reminders | Slack, Microsoft Teams, email and push | Varies by platform |
| Tracking | 100% compliance tracking, audit log exportable as CSV | Varies by platform |
| Access | Browser, plus iOS and Android apps | Varies by platform |
Five practical steps to update your financial services compliance training program
Moving from annual modules to continuous training is a managed transition. These five steps take you from where you are now to a program that keeps pace.
Map your regulatory exposure against your training inventory
List every rule that applies to your firm type, permissions and customers. Against each, record what training you have, when it was last checked against current guidance and what the completion data shows. This exercise usually turns up stale content, topics with no training at all and overlapping modules that say different things in different departments. Consumer Duty and sanctions are common gaps.
Prioritize by risk and urgency
You can't fix everything at once. Rank gaps by the regulatory risk attached and by what's coming. Financial crime has been a consistent enforcement theme, so AML usually goes first. Put senior managers' individual training records on their own urgent list, so you can produce them quickly if the FCA asks.
Choose content that stays current
This is the most important choice you'll make. Look for accredited compliance content, a documented process for updating it when rules change, a way to tell affected learners that a topic has been refreshed, and records that show which version each person completed. 5Mins has 100+ accredited financial services courses and keeps compliance content up to date as regulations change.
Automate the admin
Sending enrollment emails, chasing completions and updating spreadsheets when someone changes role take time and add no regulatory value. They also create errors: missed assignments when staff move teams and lapsed refreshers when turnover is high. Assign training by role and join date, schedule refreshers and let reminders do the chasing. 5Mins sends course reminders in Slack and Microsoft Teams, plus email and push, and a Team Progress Email tells managers about overdue courses and courses due in the next 30 days.
Build the audit trail before anyone asks
Decide what you'd want to show a regulator: for each person, what they completed, when, and what is outstanding. For senior managers, link it to their role and responsibilities. For Consumer Duty, keep records that show role-specific engagement over time rather than a single 2023 onboarding module. The 5Mins audit log can be exported as a CSV, and the platform gives you 100% compliance tracking.
How 5Mins supports financial services compliance training
5Mins is an AI-powered microlearning platform for teams that can't let compliance training lag behind regulation. It offers 500+ accredited compliance courses across the platform, including 100+ for financial services, and its content is kept up to date as regulations change.
Three things matter most for a financial services team:
- Accredited content that stays current. Financial services courses sit alongside the wider compliance library. When regulations change, the content is updated.
- Completion without the chasing. 5Mins delivers 95%+ completion through short lessons and in-flow reminders. AZA Finance raised learning participation from 30-40% to 80% after moving to 5Mins.
- Records you can pull on demand. The audit log exports as CSV and 5Mins provides 100% compliance tracking, so you aren't rebuilding evidence from several systems when someone asks.
Explore the 5Mins compliance training platform, or book a demo to see how it works for a financial services team.
Staying current comes down to three habits: know your obligations by role, refresh what changes, and keep a record you'd be happy to hand over. The tooling helps, but the ownership has to sit with a person in your firm.
Financial services compliance training FAQs
What compliance training is required for financial services firms in the UK?
It depends on your permissions and risks, but most firms train staff on AML, the Consumer Duty, the Conduct Rules and SM&CR, and data protection. Regulation 24 of the MLRs 2017 requires staff to be made aware of money laundering law and regularly trained to spot suspicious activity. There is no single prescribed syllabus or number of hours, so firms judge what is adequate for their own risk profile.
How often should financial services compliance training be updated?
Whenever the rules or guidance behind it change, and at least on a regular cycle you can explain. The MLRs 2017 say staff must be "regularly" trained, and the FCA's Conduct Rules guidance expects training to be reinforced regularly rather than done once. An annual review alone usually isn't enough.
How does the Consumer Duty change compliance training?
It shifts training from rules to outcomes. Staff need to understand what good outcomes on products and services, price and value, consumer understanding and consumer support mean in their own role. The Duty has applied to open products since July 31, 2023 and to closed products since July 31, 2024, so a one-off 2023 module is worth reviewing.
What does the FCA expect from Conduct Rules training?
The FCA's guidance says training should be relevant to the person's role, interactive and scenario-based, reinforced regularly and built into onboarding, with its effectiveness assessed. It also expects relevant senior managers to take part in overseeing it. These are expectations, not fixed requirements.
What does a good training audit trail look like under SM&CR?
For each senior manager and Certified Person, it should show what training they completed, when, and how it relates to their role. It should also show when it was refreshed. The FCA doesn't prescribe a format, but it will want records it can understand quickly. Check the latest position, because the Treasury plans to change the Certification Regime.
How can microlearning improve AML training completion rates?
Microlearning delivers AML content in microlessons of about 5 minutes, one topic at a time, on mobile or desktop. 5Mins delivers 95%+ completion, against under 5% for a legacy LMS. Short, repeated lessons also build a record of ongoing training, which fits the "regularly trained" wording in regulation 24.
Sources
- FCA enforcement data 2024/25, FCA
- FCA fines Nationwide £44m for failings in financial crime controls, December 2025, FCA
- Final Notice: Monzo Bank Limited, July 2025, FCA
- Barclays fined for poor financial crime risk controls in relation to two customers, July 2025, Mishcon de Reya, summarizing the FCA final notices
- Money Laundering, Terrorist Financing and Transfer of Funds (Information on the Payer) Regulations 2017, regulation 24, legislation.gov.uk
- PS22/9: A new Consumer Duty, FCA
- Senior Managers and Certification Regime and Conduct Rules, FCA
- FCA and PRA finalise rules on SM&CR Phase 1 reforms; HMT confirms legislative changes for Phase 2, Norton Rose Fulbright, April 2026
- Financial Services and Markets Act 2000, legislation.gov.uk
- Cepeda et al., Distributed practice in verbal recall tasks: a review and quantitative synthesis, Psychological Bulletin, 2006, doi.org
This article gives general information on UK financial services compliance training as of October 2026. It isn't legal, financial or professional advice. Check requirements with a qualified adviser.
James Francis
Head of Growth Marketing, 5Mins
James is an experienced tech marketer with a background covering HR, e-commerce, property, and financial services. In his role as Head of Growth Marketing at 5Mins.ai, he leverages AI to deliver high-impact campaigns and accelerate growth.
More articles by James

James Francis
Saurav Chopra








