Skip to content
5Mins.ai Header
5Mins Blog Module - Breadcrumbs
5Mins Blog Module - Hero
Financial Compliance 15 minute read

How to Keep Your Financial Services Team Up-to-Date on Compliance Changes

James Francis
7 March 2025 · Updated April 2026
How to Keep Your Financial Services Team Up-to-Date on Compliance Changes
5Mins Blog Module - Hero
Compliance 15 minute read

How to Keep Your Financial Services Team Up-to-Date on Compliance Changes

James Francis
7 March 2025 · Updated April 2026
How to Keep Your Financial Services Team Up-to-Date on Compliance Changes
5Mins Blog Module - Article Body

£186 million. That is what the FCA issued in financial penalties during 2024-25 - more than four times the £42.5 million total from the year before.1 The majority of those fines traced directly to the same failure modes: inadequate AML controls, weak transaction monitoring, and governance that had not kept pace with the firm’s risk profile.

Nationwide Building Society was fined £44.1 million for systemic AML failures between October 2016 and July 2021, including missing clear signs of fraudulent COVID furlough payments passing through personal accounts.2 Monzo was fined £21.1 million after rapid customer growth outpaced its compliance infrastructure.3 Barclays was fined £39.3 million for AML failures linked to a corporate banking relationship that showed clear warning signs over an extended period.4 Each case had a common thread: teams that were not adequately trained, and oversight processes that were not adequately evidenced.

For HR Directors, L&D Managers, and Compliance Officers in financial services, this is the operating context for 2026. Financial services compliance training cannot be an annual module completed in the background. It needs to be current, role-specific, engaging enough to actually work, and auditable enough to stand up when regulators ask questions.

This guide sets out the full regulatory picture your teams need to understand in 2026, explains why conventional training approaches keep producing the same gaps, and gives you a practical framework for closing them.

Key Takeaways
  • FCA enforcement hit £186M+ in 2024-25, driven primarily by AML failures and governance gaps - a 4x year-on-year increase
  • Financial services teams need current training across AML, Consumer Duty, SMCR, GDPR, MiFID II, and sanctions - not a single annual refresh
  • Consumer Duty closed book product compliance came into force in July 2024; firms must now demonstrate embedded good outcomes as FCA enforcement and thematic review activity intensifies through 2025 and 2026
  • Traditional compliance training averages under 5% voluntary completion - the FCA is now focused on whether teams can demonstrate actual understanding, not just completion
  • Microlearning delivers 95%+ completion rates, 60-80% less training time, and content that auto-updates when regulations change
  • Audit-ready training records - individual, timestamped, version-specific - are no longer optional for FCA-regulated firms under SMCR and Consumer Duty
  • SMCR creates personal accountability for senior managers; their team’s training evidence is their regulatory protection when things go wrong

Why Keeping Pace with Financial Compliance Is Getting Harder

The regulatory burden on UK financial services firms has not eased. It has expanded - and in several key areas it has accelerated. Since 2022, compliance teams have been asked to absorb the full rollout of Consumer Duty, updated SMCR accountability expectations, revisions to AML Regulations, a new FCA Enforcement Guide published in June 2025, and continuing MiFID II obligations - all while managing workforces that are increasingly distributed, time-pressed, and remote.

The pace of regulatory change creates a compounding problem for training teams. By the time a new module has been developed, approved, and deployed, the underlying guidance may have already moved on. The FCA does not accept ‘our training was accurate when we built it’ as a defence. It expects demonstrable, current understanding at all levels of the firm - from frontline staff to certified senior managers.

£186M+
FCA fines in 2024-25
Up from £42.5M the year before
£44.1M
Nationwide Building Society
Largest single fine of 2025
£21.1M
Monzo Bank
Growth outpaced compliance controls

The FCA’s 2024-25 Annual Report confirmed what enforcement data already showed: financial crime, deficiencies in AML controls, and governance failures were the dominant themes.1 These are not new categories. They appear in the FCA’s enforcement record year after year - which strongly suggests that many firms are not addressing the root cause. The training is not working.

A second pressure point is the personal accountability regime. SMCR means that when a compliance failure occurs within a senior manager’s area of responsibility, that individual can face personal sanctions: fines, restrictions, or prohibition from working in financial services. A clean, current, well-documented training record is one of the primary evidence bases regulators examine when assessing individual culpability. Firms that cannot produce it quickly are in a materially weaker position.

The firms that manage these pressures well share a common characteristic. They treat compliance training as a continuous operational function - not an annual administrative task.

The Regulations Your Financial Services Team Must Be Trained On in 2026

The following regulations are active, enforced, and require ongoing training - not one-time certification. Each carries specific implications for what ‘up-to-date’ actually means in practice.

Financial Services and Markets Act 2000 (FSMA)

FSMA is the foundational framework for UK financial regulation. It governs authorised activities, conduct of business standards, and market integrity obligations. Most other financial regulations are built on FSMA’s framework, which means teams that lack a working understanding of it struggle to apply the more specific rules correctly when it matters. FSMA training should not be a one-hour induction module. It should underpin how senior and middle managers understand their day-to-day accountability.

Anti-Money Laundering (AML) Regulations

The Money Laundering, Terrorist Financing and Transfer of Funds Regulations 2017 - amended by the 2019 revisions and subsequent updates - require firms to conduct Customer Due Diligence (CDD), maintain transaction monitoring systems, file Suspicious Activity Reports (SARs), and keep adequate records. AML training must cover current CDD requirements, practical recognition of red flags, the SAR process, and clear escalation procedures.

The FCA’s 2025 enforcement record makes the consequences of AML training failures concrete. Nationwide’s systems failed to identify customers using personal accounts for business activity - warning signs that trained staff should have recognised.2 Monzo’s onboarding and monitoring processes did not scale alongside its customer growth.3 Barclays missed clear warning signs in a long-standing corporate banking relationship over multiple years.4 In each case, the FCA concluded that the failure was not a systems problem in isolation - it was a failure of human judgment that effective training is designed to build.

AML training must reflect the current version of the regulations. A module built in 2021 or 2022 that has not been updated is not adequate evidence of current compliance. The regulatory requirements have changed; the training must reflect that change.

Consumer Duty

Consumer Duty represents the most significant reframing of UK retail financial services regulation in a generation. Introduced for open products and services in July 2023, it extended to closed book products and services from July 2024, with the FCA now intensifying its enforcement and thematic review activity through 2025 and 2026.5 The FCA now expects firms to demonstrate embedded good outcomes across four areas: products and services, price and value, consumer understanding, and consumer support.

The training challenge Consumer Duty creates is different from most compliance topics. It is not enough to train staff on a defined set of rules. The Duty requires that people at every level - from product designers to frontline advisors to operations staff - understand what ‘good outcomes’ means in their specific role and can make practical judgments accordingly. That requires scenario-based, role-specific training that is regularly refreshed as the FCA publishes its thematic reviews.

The FCA’s 2025-26 Consumer Duty workplan includes multi-firm reviews examining how firms have embedded the Duty in practice, with specific focus on outcomes monitoring, customer journey design, and consumer communications.6 Firms that cannot show the Duty is genuinely embedded in how staff think and act - not just documented in a policy - face regulatory action.

What this means for training in 2026

Consumer Duty training built as a one-time implementation exercise in 2023 is not sufficient. Refreshed, role-specific training that reflects the FCA’s current supervisory expectations is now a baseline requirement.

Senior Managers and Certification Regime (SMCR)

SMCR holds named senior managers personally accountable for compliance within their areas of responsibility. It requires firms to certify the fitness and propriety of Certified Persons annually. For training teams, this creates two distinct obligations: ensuring Senior Managers understand their personal accountability and the specific regulatory requirements within their scope; and maintaining evidenced, individual training records that demonstrate those requirements are being met on an ongoing basis.

When the FCA investigates a compliance failure under SMCR, it looks for documented evidence that the relevant senior manager took reasonable steps to ensure their team was trained and competent. A spreadsheet of completion dates is unlikely to satisfy that test. A real-time, role-specific training record showing what was covered, when, at what standard, and against which version of the regulations is a materially stronger position.

GDPR and Data Protection

Financial services firms hold large volumes of customer personal data: account information, transaction histories, communications, credit records. Every team member handling personal data needs current GDPR training. In financial services, that effectively means everyone.

The regulatory picture is growing more complex here. The FCA is working jointly with the ICO on Consumer Duty data obligations, with guidance expected in Q1 2026.6 The interaction between data protection requirements and the Consumer Duty’s vulnerable customers obligations creates real ambiguity for firms that have not trained their teams on both frameworks together. Siloed GDPR training and siloed Consumer Duty training leave a gap that the FCA is increasingly focused on.

MiFID II and Market Conduct

For firms involved in investment activities, MiFID II training covers transaction reporting obligations, conflicts of interest management, client suitability assessments, and market conduct standards. Transaction reporting failures remain a persistent enforcement theme. Sigma Broking was fined £1.09 million in 2025 for submitting approximately 924,584 incorrect reports over five years - failures that stemmed from incorrect system setup and inadequate review processes.4 The FCA made clear this was its second enforcement action against the same firm for similar failures, which illustrates the cost of not fixing the root cause.

Sanctions Screening

The UK sanctions environment has intensified considerably since 2022. Firms must maintain current screening against OFSI’s UK sanctions list, with OFSI’s updated enforcement framework published in February 2026 creating stronger consequences for failures. Staff involved in onboarding, transaction monitoring, or relationship management need working knowledge of how sanctions screening operates in practice: what triggers a match, what enhanced due diligence looks like, and how to escalate. For any firm with international client exposure, this is a priority training area for 2026.

Why Traditional Compliance Training Keeps Producing the Same Gaps

The FCA has been publicly flagging AML control failures for over a decade. The enforcement data for 2024-25 shows the same issues appearing at different firms. The problem is not that compliance teams do not understand what the regulations require. The problem is that the training delivery model most firms rely on is structurally unable to produce the outcomes regulators now expect.

Four structural failures explain why:

The completion rate problem

The average legacy LMS sees under 5% voluntary completion on compliance modules. When completions are mandatory and chased by HR, the number improves - but the training gets rushed. A 90-minute AML module completed in 28 minutes tells an auditor one thing and the regulator another. Certificate issued. Behaviour unchanged. Knowledge gap still present. The FCA’s enforcement focus has shifted from ‘did they complete training?’ to ‘can they demonstrate they understood it and acted on it?’ That is a much harder question to answer from a spreadsheet of timestamps.

The content currency problem

Traditional compliance training is built in cycles. New module developed, legal and compliance team review, deployment to LMS, rollout to staff. That process typically takes three to six months. In a regulatory environment where the FCA publishes thematic reviews, enforcement guidance, and policy updates continuously, a module deployed in January may already be materially incomplete by March. Firms often do not know their content has gone stale until a regulatory inquiry forces them to look.

The audit trail problem

The FCA no longer accepts a spreadsheet of completion dates as adequate evidence of compliance culture. Under SMCR and Consumer Duty, the regulator’s focus is on whether individuals demonstrate genuine understanding and apply it in their work. A traditional LMS that records completion without assessing comprehension - or cannot show which version of a regulation someone was trained on - creates gaps that only become visible when you are being investigated.

The engagement problem

Ask any financial services employee how they approach mandatory compliance training and the answer is consistent: it is the module they open in one browser tab while working in another. This is not a workforce motivation problem. It is a format problem. Ninety minutes of linear e-learning, mandatory by a quarterly deadline, on regulatory content that does not directly connect to their daily work, produces exactly the engagement you would expect: minimal.

Read more on how microlearning compares to traditional training and the evidence behind the engagement and retention gap.

How Microlearning Fixes Financial Compliance Training

Microlearning addresses each of these structural failures directly. Rather than delivering a 90-minute annual module, it breaks compliance content into focused 5-minute lessons - each covering one regulation, one concept, or one procedure in enough depth to be genuinely useful and assessable.

This format works for financial services teams for specific, measurable reasons:

  • Completion rates that hold up in an audit. The difference between legacy LMS platforms and microlearning is not marginal. Platforms designed for bite-sized compliance training consistently achieve 95%+ completion rates.8 A 5-minute lesson on AML red flags that appears in a learner’s mobile feed on Monday morning - engaging enough to open voluntarily, short enough to finish before the first meeting - changes the compliance dynamic entirely. Regulators can see not just that training was assigned, but that it was completed, at what standard, and when.
  • Content that stays current. When the FCA issues updated guidance on Consumer Duty or AML controls, a microlearning platform can update the relevant module and redeploy it to affected learners within days - not months. There is no long development cycle. Learners receive a notification that their training on a specific topic has been refreshed, they complete the 5-minute update, and the audit trail records that they were trained on the current version. This is what ‘keeping up with regulatory change’ actually looks like in practice.
  • Retention built for real-world application. Financial services employees encounter compliance situations under pressure: a transaction that looks suspicious, a customer request that raises a Consumer Duty consideration, a colleague whose conduct triggers an SMCR concern. The training that is effective in those moments is training that built the underlying knowledge through repeated, spaced engagement - not a single 90-minute session taken under deadline pressure twelve months earlier. The spacing effect is well-established in learning science: information revisited at intervals is retained far more effectively than information absorbed in a single block.9
  • A format that works for a distributed workforce. Financial services firms increasingly manage teams across branch networks, remote offices, and multiple time zones. Mobile-first microlearning means compliance training is accessible anywhere, on any device, without requiring staff to sit at a desktop LMS. Lessons complete during commutes, between client calls, or at the start of the working day - without pulling people out of productive work for a half-day training session.

Traditional Training vs. Microlearning: A Direct Comparison

5Mins.ai
Traditional Training
Feature Traditional Training
Module length5 minutes per lesson60-90 minutes per session
Completion rate95%+ (platform average)Under 5% (voluntary)
Content update speedDays - auto-updatedWeeks to months
Engagement modelGamified, mobile-first, voluntaryMandatory, tick-box exercise
Audit trailReal-time automated dashboardManual spreadsheet tracking
Regulatory currencyAuto-updated when rules changeOften outdated between cycles
Admin burdenZero - auto-enrolment & remindersHigh - manual chasing required
Delivery formatMobile, on-demand, in the flow of workDesktop LMS, scheduled sessions
Knowledge retentionHigh - spaced repetition approachLow - single long exposure

5 Practical Steps to Update Your Financial Services Compliance Training Programme

Moving from annual compliance modules to a continuously maintained microlearning programme is a managed transition, not an overnight switch. These five steps are designed to take you from wherever you are now to a training function that genuinely keeps pace with the FCA.

1

Map your current regulatory exposure against your training inventory

Before changing anything, get clear on where the gaps actually are. List every regulation relevant to your firm type, FCA authorisation, and customer base. Against each one, record: what training you currently have, when it was last reviewed against current regulatory guidance, and what the completion data actually looks like.

This exercise typically reveals three things simultaneously: content that has gone stale without anyone noticing (AML modules built before the 2019 amendments are common); regulations with no training coverage at all (Consumer Duty and sanctions screening are the most frequent gaps); and overlapping modules that cover the same ground inconsistently across different departments.

Consumer Duty deserves particular attention. Many firms built their compliance libraries before the Duty came into force in 2023. If your Consumer Duty training was built as a one-time implementation exercise and has not been updated since, it is almost certainly not adequate for 2026’s enforcement environment - where the FCA expects demonstrable embedded outcomes, not initial compliance documentation.

2

Prioritize by risk exposure and regulatory urgency

You will not fix everything at once. Prioritize your training gaps by two criteria: the regulatory risk attached to the gap (AML failures are currently the FCA’s highest enforcement priority, followed by Consumer Duty), and the urgency of any upcoming regulatory milestones (Consumer Duty closed book requirements active since July 2024, FCA consultations on distribution chains in H1 2026, OFSI’s updated sanctions enforcement framework).

If you operate under SMCR, treat individual senior manager training records as a separate urgent priority. The FCA does not wait for your annual training cycle when it opens an investigation. It asks for records immediately. Firms that discover they cannot produce a clean, current individual training history when the question is first asked are in a difficult position from which it is hard to recover.

3

Choose a platform that auto-updates compliance content

This is the single most important platform selection criterion for financial services. A compliance training library that does not auto-update when regulations change is a liability, not an asset. It creates false confidence: teams are certified, but they may be certified against last year’s rules.

Look specifically for: CPD-accredited compliance modules; a defined and documented process for updating content when regulations change; the ability to automatically notify affected learners when a module has been updated; and version tracking so your audit trail records which regulatory version each individual was trained on. These are not optional features for a financial services firm. They are table stakes.

4

Automate enrolment, reminders, and recertification

Manual compliance training administration - sending enrolment emails, chasing completions, tracking recertification dates, updating spreadsheets when someone changes role - consumes significant HR and compliance team time while adding no regulatory value. More importantly, it creates the conditions for errors: missed enrolments when staff change teams, outdated recertification schedules, incomplete records when turnover is high.

Automated enrolment rules based on role, department, seniority, and join date ensure every relevant person receives the right training at the right time without manual intervention. Automated recertification scheduling means AML, Consumer Duty, and SMCR refreshes happen on a defined cycle without anyone needing to remember to trigger them. The compliance function can focus on interpreting regulatory requirements and building training quality - not managing spreadsheets.

5

Build your audit trail infrastructure proactively

The best time to organize your training records is before the FCA asks to see them. Real-time dashboards should show, for every individual in your firm: what training they have completed, when, to what standard, against which version of a regulation, and what is currently outstanding.

For SMCR-governed firms, this needs to extend to individual-level reporting that maps training completion to specific accountability statements. When the FCA asks ‘can you show us what compliance training this senior manager has completed in the last 12 months and how it maps to their Statement of Responsibilities?’, you should be able to answer that question in minutes.

Consumer Duty adds a further dimension. The FCA expects evidence that the Duty is embedded in how staff think and behave - not just documented in a policy. Training completion records showing ongoing, role-specific engagement with Consumer Duty content over time are a meaningful component of that evidence base. A single onboarding module from 2023 is not.

How 5Mins Supports Financial Services Compliance Training

5Mins is an AI-powered microlearning platform built for teams that cannot let compliance training lag behind regulation. Financial services is 5Mins’ largest vertical, with 20+ customers including fintech firms, payment processors, and regulated financial institutions across the UK and globally.

For financial services compliance teams, 5Mins delivers three things that traditional training platforms consistently fail to provide:

CPD-accredited compliance content that stays current

AML, GDPR, Financial Crime Prevention, Consumer Duty, Fraud Awareness, Market Abuse, SMCR, Sanctions Awareness, and Operational Resilience modules - built by subject-matter experts and updated automatically when regulations change. When the FCA publishes new guidance, the relevant module is updated and affected learners are notified to complete the refresh. No manual redevelopment cycle, no stale content sitting in your library.

95%+ completion rates - delivered through engagement, not chasing

TikTok-style bite-sized lessons and gamified progression replace the mandatory annual module and the HR chasing that comes with it. The difference in outcomes is not incremental. AZA Finance, a pan-African payment and trading platform, increased learning participation from 30-40% to over 80% after switching to 5Mins, while reducing training costs by 30%. PayNet saw a 200% increase in learning engagement. These results reflect a fundamentally different relationship between staff and compliance training - not a marginal improvement on the same approach.

Audit-ready real-time compliance dashboards

Every completion, assessment score, and training version is recorded automatically. Compliance leads can pull individual training histories in seconds. For SMCR-governed firms, the ability to produce a complete, timestamped training record per senior manager or Certified Person - without rebuilding it from multiple systems - is a material operational advantage when the FCA asks questions. For Consumer Duty, the dashboard shows the Duty is actively embedded, not just initially implemented.

Explore 5Mins’ compliance training platform, or book a demo to see how it works in a financial services context.

Financial Services Compliance Training

Your questions answered on FCA requirements, microlearning, audit trails, and staying compliant in 2026

Sources
  1. FCA Enforcement Trends in 2025 and Expectations for 2026, WilmerHale, January 2026 — wilmerhale.com
  2. AML failures drive record FCA fines in 2025, Fintech.global, February 2026 — fintech.global
  3. FCA Reveals Costliest Enforcement Actions of 2025, Alessa, February 2026 — alessa.com
  4. Highest FCA Fines of 2025, Skillcast, December 2025 — skillcast.com
  5. Consumer Duty, Financial Conduct Authority — fca.org.uk
  6. FCA Refines Consumer Duty: Balancing Protection and Proportionality, Freshfields, October 2025 — freshfields.com
  7. Top 10 FCA Compliance Priorities in 2026, Skillcast, January 2026 — skillcast.com
  8. Compliance Training Platform, 5Mins.ai — 5mins.ai
  9. Distributed practice in verbal recall tasks: A review and quantitative synthesis, Cepeda et al., Psychological Bulletin, 2006 — pubmed.ncbi.nlm.nih.gov

This article is for general informational purposes only and does not constitute legal, financial, or professional advice. Always consult a qualified professional for guidance specific to your organisation.

All content is researched and written by the 5Mins team.

James Francis
About the Author

James Francis

Head of Growth Marketing, 5Mins

James is an experienced tech marketer with a background covering HR, e-commerce, property, and financial services. In his role as Head of Growth Marketing at 5Mins, he leverages AI to deliver high-impact campaigns and accelerate growth.

LinkedIn
5Mins Blog Module - More from Blog
5Mins Blog Module - Final CTA Banner

Stop chasing compliance completions. Start proving them.

See how 5Mins helps financial services teams stay ahead of FCA requirements - with CPD-accredited content that auto-updates, 95%+ completion rates, and audit-ready dashboards built for SMCR and Consumer Duty.

G2 Awards 2026 - High Performer, Users Love Us, High Performer Mid-Market
Footer Social Icons
Download_on_the_App_Store_Badge
Google_Play_Store_badge_EN

5Mins AI LTD
Ludgate House 107 - 111 Fleet Street 
London, EC4A 2AB, United Kingdom

 

© 5Mins AI Ltd 2026. All rights reserved

Thousands of teams trust 5Mins.ai with their compliance

EverBridgeLogo1_White-01
Kennedys Logo_Negative (White)_transparent background
gb-logo-white-mag
Dropbox-Logo
perkbox-logo-white-1
glaxosmithkline-white
london-business-school-white (1)
holidayextras white
st-jamess-place-logo-white

Add custom HTML to your email.