Protecting Client Money: What UK Financial Firms Need to Know
When a client transfers money to a financial firm, they expect it to be handled safely, recorded accurately and available when needed. Meeting that expectation takes more than opening a separate bank account. Firms need reliable processes, clear responsibilities and records that explain where the money is and who owns it.
For UK financial firms, protecting client money is also a regulatory responsibility. The Financial Conduct Authority’s Client Assets Sourcebook, known as CASS, contains rules governing client money and custody assets. Understanding which requirements apply and making them work in everyday operations is essential to protecting customers.
Start by Understanding Which Rules Apply
There is no single client money checklist that suits every financial business. The relevant requirements depend on the firm’s activities, permissions and how it receives or controls customer funds.
For example, CASS 7 contains client money rules relevant to investment business, while separate chapters address insurance distribution, debt management and claims management. Firms should establish their regulatory position before designing controls or assuming another business’s arrangements will work for them.
A useful starting point is to map how money moves through the business. Identify who receives it, which accounts it enters, when it becomes client money and when the firm’s responsibility ends. The FCA has highlighted the importance of understanding these flows and demonstrating effective segregation.
Keep Client Money Separate from Business Funds
Segregation is central to client money protection. Under the applicable rules, firms must distinguish money held for clients from money belonging to the business. Client funds should not become a convenient source of working capital when operating costs rise or cash flow tightens.
However, a bank account labelled “client account” does not, by itself, demonstrate compliance. Firms also need appropriate account arrangements, accurate records and the documentation required by their particular regime.
Under CASS 7, firms must obtain client bank account acknowledgement letters using the prescribed arrangements. These letters help establish the account’s status and the bank’s understanding of the relevant terms. Account naming, banking arrangements and supporting paperwork therefore deserve careful attention.
Before opening or changing an account, check that compliance, finance and operations teams understand its purpose and how it will be used.
Make Reconciliations a Working Control
Reconciliation means checking that records agree and investigating where they do not. It should help the firm identify problems, rather than simply generate another completed spreadsheet.
Under CASS 7, an internal client money reconciliation compares the firm’s internal records of money held for clients with its records of the amount it should hold in client bank or transaction accounts. External reconciliations check relevant records against information from banks and other third parties.
The distinction matters. A bank balance alone cannot show whether the firm has correctly calculated every client’s entitlement.
An effective reconciliation process should include:
- A documented method appropriate to the applicable rules.
- Clear responsibility for preparation and review.
- Evidence explaining differences and their resolution.
- Escalation arrangements for unresolved issues.
- Follow-up where the same errors keep returning.
Firms must follow the frequency and discrepancy-handling requirements of their applicable CASS chapter, rather than choosing a timetable purely for convenience.
Give Someone Clear Responsibility
Client money protection can break down when everyone assumes another team is handling it. Finance may maintain the records, operations may process payments, and compliance may interpret the rules. Without clear ownership, issues can remain unresolved between departments.
Relevant CASS arrangements include responsibilities for operational oversight. The resolution pack requirements also identify individuals who are important to the performance of client asset functions. This makes clear accountability a practical necessity, not simply an organisational preference.
Management should receive information that supports decisions. Reporting might cover unresolved reconciliation differences, control failures, overdue actions and significant operational changes.
The important question is not merely, “Was the process completed?” It is, “What did the process reveal, and what happened next?”
Check the Controls Behind the Policy
A well-written policy is useful only if staff follow it and systems support it. Firms should test whether their documented arrangements reflect how payments, records and exceptions are actually handled.
The following review areas provide a practical starting point:
| Review area | Question to ask |
| Money flows | Can we explain where client money enters, moves through and leaves the business? |
| Bank accounts | Are the accounts and required acknowledgement letters appropriate and current? |
| Reconciliations | Can we demonstrate how differences were investigated and resolved? |
| Responsibilities | Is there a clear owner for each control and escalation? |
| Failure planning | Could an insolvency practitioner retrieve essential information promptly? |
These questions draw together the FCA’s requirements and guidance on money flows, reconciliations, account documentation and resolution planning.
Reviews become especially valuable when a firm introduces a new product, changes banking arrangements or replaces a system. Existing documentation should not be assumed to cover a changed process.
Use External Assurance Appropriately
External scrutiny can help identify weaknesses that internal teams have missed. However, firms should first establish which client assets reporting and audit requirements apply to their circumstances.
Where an engagement is required, choosing a CASS audit service should involve considering the auditor’s relevant experience, resources and understanding of the business. CASS audit work focuses on the applicable client asset requirements; it should not be treated as interchangeable with an ordinary financial statement audit.
Early preparation also matters. Staff should know which records they are responsible for providing, and the firm should be ready to explain its processes and previous findings.
Under SUP 3.10, the general deadline for an auditor to deliver the client assets report to the FCA is four months after the reporting period ends, subject to the stated exception. Firms should confirm their applicable requirements rather than assume every engagement follows the same timetable.
Prepare for Failure, Not Just Business as Usual
Client money arrangements must remain understandable when a business is under pressure. If key employees leave or the firm fails, essential information should not depend on someone’s memory.
For firms within the relevant CASS 6 and CASS 7 scope, the CASS resolution pack brings together information intended to help an insolvency practitioner return client money and assets more quickly. It must be maintained throughout the period in which the firm holds relevant client assets.
The pack includes information about relevant institutions, agreements, responsibilities and how supporting documents can be retrieved. Its contents must remain accurate through ongoing review.
Make Protection Part of Everyday Operations
Protecting client money is an ongoing responsibility. Separate accounts, accurate records, effective reconciliations, accountable management and appropriate assurance need to work together.
The strongest practical test is whether the firm can explain where client money is, demonstrate the controls protecting it and retrieve the evidence when needed. That is what turns a compliance framework into meaningful protection for customers.
Conclusion
Protecting client money requires consistency, clear accountability and controls that work in practice. By understanding their obligations, maintaining accurate records and addressing weaknesses promptly, UK financial firms can strengthen compliance and safeguard the trust clients place in them.