Source of Funds vs Source of Wealth: A Practical UK Compliance Guide

The core difference in one view

The FCA Financial Crime Guide defines source of wealth as how a customer or beneficial owner acquired their total wealth, and source of funds as the origin of the funds involved in the business relationship or occasional transaction. HMRC uses the same split in its Economic Crime Supervision Handbook, describing source of funds as the origins of the money used in a particular transaction and source of wealth as the customer's entire wealth and how it was accrued.

The practical consequence is that source of funds answers a narrow question about a single flow of money, while source of wealth answers a broad question about a person's economic history. A customer transferring GBP 200,000 into an investment account can usually point to the bank account the money came from, but that only becomes meaningful when you can also explain how that person came to hold GBP 200,000 in the first place. The two checks work together, and one is not a substitute for the other.

This matters because criminals exploit the gap. Money can be layered through legitimate-looking bank accounts so that, by the time it reaches your firm, the immediate source of funds looks clean. Only by testing the wider source of wealth can you see whether the overall picture holds together. A short salaried career that supposedly generated tens of millions, or a business whose accounts do not support the sums being moved, are precisely the inconsistencies that a source of wealth review is designed to surface. Treating the two as one check is the shortcut that lets those inconsistencies slip through.

When you must establish each under the MLRs

Neither check is required on every customer. Standard customer due diligence under the Regulations is about identifying and verifying the customer and understanding the nature of the relationship. Source of funds and source of wealth move to the foreground when the risk rises, and the Regulations set out exactly when that happens.

Regulation 33 requires enhanced customer due diligence in defined higher-risk situations. These include any case identified as high risk, a business relationship or transaction with a person established in a high-risk third country or a country subject to a FATF call for action, correspondent relationships, cases where a customer is a politically exposed person or their family member or known close associate, cases where false or stolen identification has been provided, and transactions that are unusually complex or unusually large, follow an unusual pattern, or have no apparent economic or legal purpose. For call for action countries, regulation 33 specifically requires obtaining information on the source of funds and source of wealth of the customer and the customer's beneficial owner.

Regulation 35 goes further for politically exposed persons. Where a firm proposes to have, or continue, a business relationship with a PEP, a family member or a known close associate, it must obtain senior management approval, take adequate measures to establish the source of wealth and source of funds involved in the proposed relationship or transactions, and conduct enhanced ongoing monitoring. For PEPs, then, establishing both source of funds and source of wealth is not optional; it is a specific regulatory requirement.

It is worth being clear about who counts as a PEP for these purposes. The Regulations describe a PEP as an individual entrusted with prominent public functions, other than a middle-ranking or more junior official. The obligation extends to family members, which the Regulations define as including a spouse or civil partner, children and their spouses or civil partners, and parents, and to known close associates such as someone in joint beneficial ownership of a legal entity or arrangement with the PEP. The FCA has stressed that firms should assess each PEP individually rather than applying a blanket policy, and that domestic PEPs generally start from a lower-risk position than overseas PEPs unless other risk factors are present.

A proportionate approach, not a fixed checklist

The Regulations require adequate measures, not maximum measures. The FCA's finalised guidance on the treatment of politically exposed persons makes this explicit: adequate measures vary according to the risk assessed, depending on the nature of the relationship or transaction. Greater measures are needed to clarify source of wealth and source of funds where a transaction is unusual or unexpected, while for lower-risk products or relationships reliance might be placed on funds coming from a credit or financial institution.

That proportionality cuts both ways. The same guidance stresses that firms should assess the risk of each individual PEP on a case-by-case basis rather than applying a generic policy, and that for lower-risk PEPs firms can make use of information reasonably available to them, including public domain sources. The intensity of your source of funds and source of wealth enquiry should track the risk, so a domestic PEP with a transparent salaried career warrants a lighter touch than an overseas PEP moving unexplained sums.

Building this judgement into a defensible framework is where a structured controls platform helps. You can map risk tiers to evidence expectations and record the rationale for the depth you chose. See how Nasara Connect supports enhanced due diligence controls for one way to operationalise this.

How to establish and evidence source of funds

Establishing source of funds is a sequence, not a single document request. Start by asking the customer to explain where the money came from, then corroborate that explanation with independent, reliable evidence rather than accepting an assertion at face value. The FCA lists reliance on a single source of information for enhanced due diligence as a poor practice, so plan to triangulate.

HMRC's handbook points to practical evidence for the funds behind a transaction, including bank statements, completion documents confirming the sale of shares or property, pension release paperwork, and records of financial gifts. Match the paperwork to the amount and timing of the flow you are reviewing, and note any gap between what the customer said and what the documents show.

Depth should follow risk. For a lower-risk relationship where the money arrives from a regulated credit or financial institution, a bank statement confirming the transfer may be enough. For an unusual or unexpectedly large transaction, you will want to trace the money back a further step, for example to the property completion or share sale that generated it, so that the funds are connected to an identifiable and legitimate event rather than simply to an account balance.

How to establish and evidence source of wealth

Source of wealth is a story about accumulation, so the evidence is broader and often historical. The aim is to explain how the customer built their overall asset base, which usually means combining several data points rather than relying on one payslip or one property sale.

HMRC's handbook gives useful examples for wealth: employment contracts and pay slips for salary, audited business accounts for company ownership, estate accounts showing an inheritance, documents confirming the sale of shares or property, and open-source information about publicly known wealth. For a business owner, that might be several years of accounts; for a beneficiary, an estate account and a will; for a senior executive, a remuneration history. The FCA expects firms to establish the legitimacy of, and document, both the source of wealth and source of funds for high-risk relationships, and to complement staff knowledge with more objective information.

Red flags and common failings

Some warning signs should prompt deeper enquiry into funds and wealth. HMRC highlights cash-based activity from customers in jurisdictions that restrict cash use, where legitimate sourcing should be evidenced through documentation such as customs declarations. More broadly, watch for wealth that cannot be explained by a person's known career or business, transactions that are inconsistent with the customer's profile, unusual or unexpectedly large flows, and reluctance or inability to provide corroborating evidence.

The FCA has also set out what firms get wrong. Poor practices include failing to distinguish between source of funds and source of wealth, relying on a single source of information for enhanced due diligence, granting waivers from establishing source of funds without good reason, and disregarding credible allegations of criminal activity from reputable sources over sustained periods. The recurring theme is that information should be documented and challenged, not merely gathered and filed.

Payment flows themselves carry signal. Monitoring inbound and outbound transactions against the wealth and funds picture you built at onboarding is how inconsistencies surface. Read more about how transaction and payment monitoring fits into the control framework.

Conclusion

Source of funds and source of wealth are separate questions, and UK firms are expected to treat them that way. Source of funds explains the specific money in front of you; source of wealth explains how the customer came to have money at all. Under the Money Laundering Regulations 2017, both come to the fore in enhanced due diligence and both are a specific requirement for politically exposed persons, their family members and known close associates.

The strongest programmes do three things well: they apply a proportionate, risk-based depth of enquiry rather than a one-size-fits-all checklist, they corroborate customer explanations with independent evidence, and they document and challenge what they find. Get those right and your enhanced due diligence will stand up to supervisory scrutiny while keeping genuine customers moving. Build these expectations into repeatable controls and the distinction stops being a talking point and becomes part of how the firm works.

Frequently asked questions