By Alexandra Will, Galajo Bah
On 17 December 2020, HM Treasury and the Home Office published the updated third National Risk Assessment (NRA), setting out the key money laundering (ML) and terrorist financing (TF) threats and risks facing the UK. It highlights the changes and developments to the threat landscape since the previous NRA was published in 2017, as well as actions taken to safeguard against such threats.
The NRA assesses the domestic risk of ML and TF in the UK, considering key industry sectors, such as financial services, money service businesses (MSBs), and gambling, along with means utilised, such as cryptocurrency and cash. The NRA also evaluates the international risks to the UK from money flowing into and out of the country and considers the impact of COVID-19 on ML and TF.
The NRA concludes that (i) despite the challenges in quantifying the ML threat to the UK, it is likely the level of risk has increased, not least because of an uptick in predicate offence crimes; and (ii) the threat to the UK from terrorism has increased to “severe” (attack is highly likely) from its previous level of “substantial” (attack is likely).
The NRA provides an outline of the ML and TF legal, regulatory, and law enforcement framework; the threats both in nature and scale; the international outlook and risk exposure from overseas; the impact of COVID-19; and the risk scores from these threats for each of the sectors for 2020 compared to 2017.
The ML risk remains unchanged as high across key financial services segments (retail, wholesale banking, private banking, and wealth management), cash businesses, MSBs, professional services providers, and property businesses and art market participants, with the risk of facilitating TF remaining high for retail banking in financial services, cash businesses, and MSBs.
The risk of high-value dealers, real estate, and letting agency businesses facilitating ML and TF is rated medium, with the ML and TF risk for use of cryptocurrencies (referred to as digital currencies in the 2017 NRA) increasing from low in 2017 to medium. The government’s improved understanding of the risk and respective mitigants of cryptoassets, the inclusion of cryptoasset exchange and custodian wallet providers into the UK’s ML regulations (MLRs 2017) and the fact that cryptoassets are yet to achieve mainstream adoption by consumers or integration into the traditional financial services sector means the risk is likely still shy of high. This is in contrast with United States (US) law enforcement’s apparent view that cryptoassets are generally high-risk. The US Department of Justice (DOJ) recognises cryptocurrencies as a danger despite acknowledging the benefits of distributed ledger technology. Concerns over these dangers culminated in the DOJ’s Cryptocurrency Enforcement Framework released in October 2020 to provide a comprehensive overview of the emerging threats and challenges associated with the increasing prevalence and use of cryptocurrency, the regulatory and enforcement efforts, and the response strategies.
The NRA highlights that as a result of the global lockdown measures implemented due to the COVID-19 pandemic, cross-border cash movement has shifted to methods such as cash via freight, use of cryptoassets, or trade-based ML. Fear of the pandemic has also been used to commit predicate offences, including, for example, sale of fake testing kits and personal protective equipment, appeals to support illegitimate charities, and exploiting government financial support schemes.
The NRA provides an up-to-date view of the ML and TF risk landscape in the UK. It is relevant for all firms in the UK’s regulated and supervised sectors, as the NRA should be a key building block in developing firms’ AML/TF risk assessments and control frameworks. For firms that recently became subject to the MLRs 2017 and which are in the process of building or enhancing their AML/TF and sanctions programmes, the NRA provides valuable insights for the design and configuration of the various AML/TF controls. The NRA may also be of interest to firms with operational links to the UK, as it allows a comparison of the UK domestic ML/TF risks to those of firms’ own home regimes.
MLROs and heads of AML Compliance can use the publication of the NRA as a trigger to review their existing AML/TF risk assessments to evaluate whether the trends and developments identified in the NRA increase the firms’ inherent risk, and whether existing controls are sufficient mitigants. Where necessary, institutions may need to enhance controls to address any identified gaps and remain within an institution’s risk appetite.
Newly regulated firms can use the NRA as a basis for developing their AML/TF risk assessment, identifying the risks their firm’s business are exposed to and developing their control environment, with the information in the NRA helping to design and calibrate the controls in line with the current risk exposure.
Guidehouse has experience supporting a broad spectrum of clients, including financial and nonfinancial businesses in the regulated and supervised sectors in the UK and globally.
Please reach out to us if you would like to discuss further how we can assist you, for example to develop or review your AML/TF risk assessment, AML/TF and sanctions programme, or selected AML/TF or sanctions controls.