Monzo Fined £21 Million Over Financial Crime Control Failures

The UK’s Financial Conduct Authority (FCA) has issued a landmark £21.1 million fine against digital bank Monzo for critical lapses in its financial crime prevention systems during a period of rapid growth. The enforcement action highlights systemic failures across key operational areas between October 2018 and August 2020, as the bank surged from 600,000 to over 5.8 million customers.

According to the FCA’s findings, Monzo allowed thousands of individuals to open accounts using blatantly implausible personal details — including fictitious addresses such as Buckingham Palace and 10 Downing Street. These oversights underscored serious weaknesses in the bank’s internal controls, which failed to scale alongside its meteoric rise in the UK’s fintech landscape.

Despite being subject to a formal restriction from the FCA in August 2020, prohibiting the onboarding of high-risk customers, Monzo continued to allow more than 34,000 such accounts to be opened until June 2022. Regulators described this breach as a “fundamental failing” in Monzo’s anti-money laundering (AML) procedures and risk-based assessments.

Therese Chambers, Joint Executive Director of Enforcement and Market Oversight at the FCA, remarked, “Banks must act as gatekeepers in the financial system. By failing to implement basic controls, Monzo jeopardized the integrity of the UK’s financial defences against crime. The acceptance of obviously false customer information reveals a shocking level of procedural neglect.”

The FCA further noted that Monzo’s automated systems for monitoring suspicious activity were insufficiently staffed and misconfigured, resulting in customer alerts not being reviewed and multiple instances of high-risk behavior going undetected. Monzo also failed to provide adequate training to staff in AML protocols and neglected to verify customers against its own internal risk indicators.

In response, Monzo has launched what it describes as a “comprehensive financial crime change programme,” aimed at reforming its internal practices. The bank claims it has significantly strengthened its fraud detection capabilities and client verification systems. TS Anil, Monzo’s Group CEO, acknowledged the FCA’s findings, stating: “These issues relate to a historical snapshot of our journey. We have taken substantial steps to improve and remain committed to staying ahead of emerging threats.”

Originally pegged at £30.1 million, the fine was reduced after Monzo agreed to settle the matter early, avoiding a drawn-out legal battle. This case marks the tenth enforcement action by the FCA against UK banks for AML shortcomings since 2021 — a growing trend amid increased scrutiny of financial institutions in the digital age.

As Monzo approaches the milestone of 13 million customers, the FCA’s ruling serves as a stern reminder to all fintech firms: innovation cannot come at the expense of vigilance, compliance, and ethical responsibility.

Monzo has implemented a comprehensive financial crime change programme to overhaul its systems and address the deficiencies identified by the FCA.

• Enhanced customer onboarding: Monzo redesigned its onboarding process to ensure more rigorous identity verification and plausibility checks (e.g. flagging landmark addresses like Buckingham Palace).
• Improved risk assessment tools: The bank upgraded its internal risk matrix to better identify high-risk customers and apply appropriate due diligence.
• Stronger transaction monitoring: Monzo reconfigured its automated alert systems and increased staffing to ensure suspicious activity is promptly reviewed and escalated.
• Independent review: Monzo underwent a full external audit of its financial crime framework, as mandated by the FCA.
• Lifted restrictions: After implementing the recommended changes, the FCA lifted its Voluntary Requirement (VREQ) in February 2025, allowing Monzo to resume onboarding high-risk customers under stricter controls.
• Staff training: The bank introduced more robust AML training for employees, especially those handling alerts and investigations.
• Policy updates: Monzo refined its procedures for identifying politically exposed persons (PEPs) and applied enhanced due diligence where necessary.
• Data integrity checks: It now verifies customer addresses and other personal details more thoroughly, including cross-referencing postal codes and PO boxes.

Monzo’s CEO, TS Anil, emphasized that these changes reflect lessons learned and a commitment to staying ahead of financial crime risks as the bank scales toward 13 million customers.