Different regulatory objectives
Consumer-credit compliance asks whether a product and its customer journey satisfy applicable rules on advertising, information, creditworthiness, agreement terms, servicing, arrears and consumer rights. Financial crime compliance asks whether a firm has identified and controlled the risk that its services may facilitate laundering, terrorist financing, sanctions evasion, fraud or other illicit activity. A firm can perform identity checks for financial crime purposes yet fail to deliver an obligatory credit disclosure. Conversely, a correctly disclosed loan does not prove that any required anti-money laundering controls have been performed. The regulatory perimeter, responsible entity and national law must be established separately for each set of obligations. Neither a general compliance policy nor one risk score replaces this legal mapping.
Customer due diligence is not creditworthiness
Customer due diligence under applicable anti-money laundering law can involve identifying and verifying a customer, understanding relevant ownership or business relationships, assessing financial crime risk and conducting ongoing monitoring. Creditworthiness assessment concerns the applicant's repayment circumstances and the requirements imposed by the governing consumer-credit framework. A verification document might provide useful data for both, but the legal purposes are different. For example, identity evidence does not demonstrate the consumer can repay without undue difficulty, and a positive affordability outcome does not resolve the risk of illicit funding. Data collection, retention, access and customer communication should therefore be designed around the actual obligations and their distinct legal bases. Avoid assuming that every consumer credit intermediary has identical AML duties.
The UK perimeter can split authorisation from AML registration
The FCA regulates consumer credit activities within its statutory remit and supervises specified firms for anti-money laundering obligations under the Money Laundering Regulations. Its official guidance identifies consumer credit lending among financial activities that may fall within the relevant AML supervisory framework. It also distinguishes firms registered solely for AML purposes from firms authorised for wider regulated activities. These statuses are not equivalent. A consumer-credit lender's permission position should be checked against the applicable regulated activity and exemptions; the financial crime duties should be checked against the Money Laundering Regulations and the firm's activities. Some firms may face both sets of obligations, while others may face different supervisory arrangements. Do not infer FCA conduct authorisation from an AML registration alone.
Fraud controls and customer protection meet in the application
Fraud prevention intersects with lending operations when a firm checks applicant identity, detects synthetic identities, verifies employment data or investigates a suspicious broker introduction. Such measures can protect the business and consumers. However, an internal fraud indicator is not a substitute for properly applying creditworthiness, discrimination, data protection or adverse-action rules where they govern the decision. A firm should record why data was used, which policy produced an outcome, what explanation was provided and what review route was available where required. Financial crime concerns may also engage restrictions on disclosure and reporting; operational scripts should not promise information that a firm is legally prohibited from revealing. Exception handling needs input from both compliance disciplines.
US obligations do not arise from one universal lender category
In the United States, federal consumer credit laws such as the Truth in Lending Act and Equal Credit Opportunity Act operate alongside the Bank Secrecy Act, sanctions requirements and other financial crime rules. Applicability depends on the entity, activity and legal instrument. For example, the AML programme requirements governing a bank should not automatically be described as identical to those governing every non-bank loan originator. Regulatory roles also differ between the CFPB, prudential regulators, FinCEN, OFAC and relevant state agencies. A cross-functional map should identify each rule and responsible authority rather than labelling all controls as a generic compliance requirement. State licensing and consumer protection rules can create further duties beyond federal law.
How to prevent duplicated or missing controls
Build two obligation registers with shared reference points. For credit conduct, identify the agreement, marketing journey, decision and servicing stage. For financial crime, identify the relevant activity, customer risk, applicable verification, monitoring and reporting obligations. Link both to legal-entity ownership and the operational systems handling customer data. If the same onboarding field is reused for separate purposes, record the legal basis and limits of each use. Test manual escalation, suspected impersonation, missed customer documents, adverse decisions and suspicious activity scenarios. Contractual allocation to a technology provider does not determine statutory accountability. Written procedures should identify who can suspend activity, who reviews exceptions and who preserves legally appropriate evidence.
Monitor independent legal change triggers
Changes in consumer-credit rules, the 2026 CCD2 transition, AML legislation, sanctions lists, FATF standards and regulator guidance have different effects and timelines. FATF Recommendations are international standards that jurisdictions implement through domestic measures; they should not be described as directly binding rules on every lender. An FCA consultation or proposed AML supervisory reform should likewise be distinguished from enacted law. Review product classifications and control coverage when the legal perimeter changes, a new customer segment is added or a new payment route is launched. Keep the source date and the reviewed conclusion together. This supports coherent governance without confusing credit customer protection with financial crime prevention.
Frequently asked questions
Does one regulatory framework govern all lenders?
No. Each product, legal role and jurisdiction requires its own scope analysis and official legal sources.
Is regulator guidance equivalent to legislation?
No. Guidance may explain supervisory expectations but should be distinguished from binding statutory or regulatory requirements.
When should this analysis be reviewed?
Review when legislation, national implementation, regulator interpretation, credit products or legal entities change.
Primary sources
FCA consumer credit ↗FCA money laundering and terrorist financing ↗FATF Recommendations ↗Read the source in its current version. National implementing measures and product-specific applicability may require additional research.