UK Regulation and Professional Integrity: The Regulatory Framework relating to Financial Crime

Study the regulatory framework relating to financial crime for CISI UK Regulation and Professional Integrity, with a UK-specific reading frame built around the official chapter structure and exam weighting.

This is one of the heaviest chapters on the paper because it brings together market abuse, insider dealing, money laundering, sanctions, bribery, data protection, and whistleblowing. The volume can feel intimidating, but the exam is usually testing classification and escalation rather than encyclopedic detail. The strongest answer begins by asking what kind of misconduct or risk is present. Is it inside information, suspicious funds, market manipulation, sanctions exposure, bribery risk, or a speaking-up issue? Once the category is clear, the control logic becomes much more disciplined.

Chapter snapshot

CheckWhat matters
Official topic weighting18%
Core distinction under pressureidentify the type of financial-crime risk or market-abuse behaviour first, then route it to the correct control, escalation, or disclosure response.
Strongest use of this pageread it before timed sets so you can recognise the real route, rule, or conduct problem being tested
UK noteKeep UK framing active: FCA, PRA, Bank of England, HM Treasury, FOS, FSCS, FSMA, SM&CR, COBS, CASS, DISP, COMP, JMLSG, UK MAR, and GBP where a sterling amount matters.

What this chapter is really testing

The paper usually rewards candidates who can distinguish between different financial-crime and market-integrity problems that sound superficially similar. Insider dealing is not the same as general poor conduct; suspicious client funds are not the same as product unsuitability; sanctions screening is not the same as a complaint process.

It also tests escalation judgement. Many questions are really about what the firm should do when faced with a red flag, not about who can define a crime in the abstract.

Section map

SectionMain exam angle
FCA approach to financial-crime preventionIf the stem is about controls, monitoring, or prevention, think systems-and-controls first rather than individual punishment only
Market abuse concepts, reporting, and safe harboursIf the behaviour could distort the market or misuse sensitive information, move into UK MAR thinking
Market soundings and investment recommendationsIf the issue is sharing information in a controlled way, think process and safeguards rather than casual conversation
Insider dealing and inside informationIf the information is confidential and likely to move the price, inside-information logic is probably in play
Market manipulation and disclosure obligationsIf the conduct creates a false market impression, manipulation may be the decisive clue
Money laundering concepts and legal frameworkIf unexplained funds or criminal origin are the issue, move into AML reasoning rather than suitability or sales language
AML controls, KYC, due diligence, and reportingIf customer identity, beneficial ownership, or source of funds is unclear, think due diligence and escalation
Terrorist financing and sanctionsIf the issue involves listed persons, restricted jurisdictions, or severe financial-crime exposure, sanctions logic is likely central
Bribery, corruption, and data protectionIf an advantage is offered to influence behaviour improperly, bribery or corruption thinking is relevant
Whistleblowing and speaking upIf a serious concern cannot be safely resolved at desk level, speaking-up and escalation logic becomes stronger

Financial-crime classifier

Start by identifying the lane. The control response depends on whether the issue is market integrity, suspicious property, sanctions exposure, improper advantage, personal data, or speaking up.

Stem clueLikely laneBetter response
Non-public, precise, price-sensitive informationInside information or insider dealingRestrict use/disclosure, follow inside-information controls, consider insider lists
Trading pattern appears to create a false or misleading market impressionMarket manipulationEscalate through market-abuse surveillance and suspicious transaction/order reporting route
Client funds have unclear origin or inconsistent source-of-funds explanationAMLPause, complete due diligence, escalate suspicion internally
Client or counterparty may be listed or linked to a restricted jurisdictionSanctions or terrorist-financing controlScreen, stop where required, escalate, and follow sanctions procedures
Gift, payment, or favour is offered to influence a decisionBribery or corruptionRefuse or escalate; consider adequate-procedures expectations
Personal data is mishandled or disclosed improperlyData protectionTreat as governance and data-control issue, not merely poor service
Serious concern is suppressed internallyWhistleblowing or speaking upUse protected escalation channels and whistleblowing arrangements

Market abuse versus AML

QuestionMarket-abuse laneAML lane
What is being protected?Market integrity and fair information useThe financial system from criminal property and illicit funds
Main red flagInside information, false impression, suspicious tradingSuspicious funds, ownership opacity, unusual transactions
Typical controlInformation barriers, insider lists, surveillance, STOR-style escalationCDD, EDD, ongoing monitoring, internal SAR escalation
Common wrong turnTreating price-sensitive information as only a confidentiality issueTreating suspicious funds as a normal onboarding delay

AML stages and controls

StageWhat it looks likeExam clue
PlacementCriminal proceeds enter the financial systemCash, initial deposit, or first transfer into an account
LayeringTransactions obscure origin or ownershipComplex transfers, multiple accounts, unusual movement
IntegrationFunds appear legitimate and usableInvestment, property, business, or seemingly normal return of funds
ControlWhat it is trying to prove
Customer due diligenceWho the customer is and whether the relationship makes sense
Beneficial-ownership checksWho ultimately owns or controls the customer
Source-of-funds/source-of-wealth checksWhether the money and wealth have a credible origin
Enhanced due diligenceHigher-risk customers, jurisdictions, PEPs, or unusual facts need deeper scrutiny
Ongoing monitoringRisk assessment continues after onboarding
Internal reportingSuspicion is escalated rather than handled as a sales inconvenience

Insider-information checklist

Inside-information questions often turn on a small set of facts.

CheckWhy it matters
Is the information non-public?Public information is not inside information merely because it is useful.
Is it precise enough to matter?Vague rumour is different from specific information about an issuer or instrument.
Would it likely affect price if made public?Price sensitivity is central to the inside-information analysis.
Is the person using, disclosing, or encouraging dealing?The conduct response depends on what the person does with the information.
Is a controlled process available, such as a market sounding?Process and safeguards can change the analysis.

Section-by-section lesson

FCA approach to financial-crime prevention

This section frames financial crime as a systems-and-controls issue. The firm is expected to have proportionate arrangements to reduce the chance that it is used for financial crime.

  • If the stem is about controls, monitoring, or prevention, think systems-and-controls first rather than individual punishment only.
  • The FCA lens here is about risk management as well as misconduct response.

Market abuse concepts, reporting, and safe harbours

Market abuse questions usually test whether conduct threatens market integrity and what sort of reporting or safe-harbour reasoning applies. The exact label matters because it drives the expected response.

  • If the behaviour could distort the market or misuse sensitive information, move into UK MAR thinking.
  • Safe harbour language is a clue that the question is about whether behaviour fits a permitted framework rather than an outright ban.

Market soundings and investment recommendations

This section is about how firms handle sensitive communications and recommendations without crossing into abusive conduct. The exam often uses it to test controlled communication and process discipline.

  • If the issue is sharing information in a controlled way, think process and safeguards rather than casual conversation.
  • An investment recommendation carries conduct and integrity responsibilities, not just marketing value.

Insider dealing and inside information

Inside-information questions usually turn on whether the information is precise, non-public, and price-sensitive enough to matter. Once that is recognised, the conduct consequences become more obvious.

  • If the information is confidential and likely to move the price, inside-information logic is probably in play.
  • Do not downgrade the issue because the information came from an informal source.

Market manipulation and disclosure obligations

Market manipulation questions focus on behaviour that gives a false or misleading impression or distorts the market. Disclosure obligations matter because withholding or mishandling information can also damage integrity.

  • If the conduct creates a false market impression, manipulation may be the decisive clue.
  • Disclosure failures can be part of the integrity problem rather than an administrative afterthought.

This section anchors AML in broad legal and practical terms. The exam wants candidates to know why laundering is harmful and how the legal framework supports prevention and reporting.

  • If unexplained funds or criminal origin are the issue, move into AML reasoning rather than suitability or sales language.
  • The laundering framework is about protecting the system, not just collecting client documents.

AML controls, KYC, due diligence, and reporting

This is the operational AML heart of the chapter. Questions often test onboarding, source-of-funds enquiries, suspicious activity, and what the firm should do with unresolved concerns.

  • If customer identity, beneficial ownership, or source of funds is unclear, think due diligence and escalation.
  • If concern remains, the answer is rarely to proceed quickly and ask questions later.

Terrorist financing and sanctions

Sanctions and terrorist-financing questions are about restricted dealings, screening, and heightened caution. The main exam skill is recognising that these are not ordinary client-onboarding inconveniences.

  • If the issue involves listed persons, restricted jurisdictions, or severe financial-crime exposure, sanctions logic is likely central.
  • Proceeding first and checking later is especially weak in this part of the chapter.

Bribery, corruption, and data protection

These topics share a theme of misuse of power or misuse of information. The exam tests whether the candidate can recognise conduct that compromises integrity and lawful handling of data or advantages.

  • If an advantage is offered to influence behaviour improperly, bribery or corruption thinking is relevant.
  • Sensitive information handling should be treated as an integrity issue, not just a technical IT matter.

Whistleblowing and speaking up

This section tests whether firms allow problems to be raised and whether individuals respond properly when concerns cannot be resolved informally. The exam often rewards escalation where silence would prolong harm.

  • If a serious concern cannot be safely resolved at desk level, speaking-up and escalation logic becomes stronger.
  • Whistleblowing is about protecting the firm and market, not betraying the team.

Best study order inside this chapter

  1. FCA approach to financial-crime prevention: Start with the control framework.
  2. Market abuse concepts, reporting, and safe harbours: Then secure the market-integrity lane.
  3. Market soundings and investment recommendations: Add controlled communication next.
  4. Insider dealing and inside information: Then sharpen your inside-information recognition.
  5. Market manipulation and disclosure obligations: Add the false-market-impression logic.
  6. Money laundering concepts and legal framework: Then move into AML foundations.
  7. AML controls, KYC, due diligence, and reporting: Secure the operational AML steps.
  8. Terrorist financing and sanctions: Add the sanctions and restricted-dealings layer.
  9. Bribery, corruption, and data protection: Then cover misuse of advantages and information.
  10. Whistleblowing and speaking up: Finish with escalation and internal challenge.

Quick map

    flowchart TD
	A["Red flag appears"] --> B{"What kind of red flag is it?"}
	B -->|"Inside information or false market impression"| C["Market abuse or insider-dealing control route"]
	B -->|"Suspicious funds or unclear beneficial ownership"| D["AML due diligence and escalation route"]
	B -->|"Listed person or restricted jurisdiction"| E["Sanctions route"]
	B -->|"Improper advantage or pressure"| F["Bribery or corruption route"]
	B -->|"Serious unresolved internal concern"| G["Speaking-up and whistleblowing route"]

What stronger answers usually do

  • name the risk category before deciding the control response
  • treat AML, sanctions, and market abuse as distinct lanes even where they all involve red flags
  • prefer escalation and control discipline over convenience when key information is missing
  • recognise that financial-crime compliance is about protecting the system, not just completing forms
  • separate insider dealing, market manipulation, suspicious funds, sanctions exposure, bribery, and data protection before choosing the control
  • recognise that financial-crime weakness can be a governance failure even before a criminal prosecution exists

Sample Exam Question

During onboarding, a prospective client provides incomplete information about beneficial ownership and offers inconsistent explanations for the source of a large incoming transfer. What is the strongest immediate response?

  • A. Pause progression and escalate through the firm’s AML controls
  • B. Proceed if the client seems commercially attractive
  • C. Ignore the issue unless a complaint is later received
  • D. Treat it only as a marketing-communications problem

Answer: A.

The facts point to AML and due-diligence concerns. The correct response is to pause and escalate through the appropriate AML control route rather than proceeding for commercial reasons.

Common traps

  • treating all red flags as the same kind of issue
  • using complaint-handling logic when the issue is suspicious activity or inside information
  • thinking partial information is enough if the client seems valuable
  • equating speaking up with disloyalty instead of control discipline

Key takeaways

  • This chapter is about classification and escalation under pressure.
  • Financial-crime controls work only if the firm acts on red flags rather than rationalising them away.
  • Inside information, AML, sanctions, and bribery are related by integrity, not identical in control response.
Revised on Friday, May 29, 2026