SMF16 and SMF17 Explained: Compliance Oversight and the MLRO

SMF16 and SMF17 are the two designations closest to the day-to-day reality of regulation. The Compliance Oversight holder is accountable for the firm’s compliance function, and the Money Laundering Reporting Officer for its anti-money laundering systems and controls. They are the most frequently recruited SMF roles, the most frequently combined, and the ones where getting the appointment wrong shows up fastest, usually in a supervisory visit or a financial crime review. This guide explains what each designation requires, the personal liability the MLRO carries, when combining them works, and what firms should look for when recruiting.

SMF16: Compliance Oversight

SMF16 is the function of acting in the role of the director or senior manager responsible for the firm’s compliance function. That function is required by the FCA’s systems and controls rules in SYSC 6.1: the firm must maintain a permanent and effective compliance function that operates independently, monitors whether the firm is meeting its regulatory obligations, and advises the business on them.

SMF16 applies to Core and Enhanced firms. In practice, the SMF16 holder owns the compliance monitoring programme, regulatory change management, the firm’s relationship with its supervisor on compliance matters, and much of the practical work of evidencing Consumer Duty outcomes. Our piece on Consumer Duty and the SMF framework explains why so much of that accountability lands with SMF16.

SMF17: The Money Laundering Reporting Officer

SMF17 is the MLRO function: responsibility for oversight of the firm’s compliance with the FCA’s rules on systems and controls against money laundering, set out in SYSC 6.3. It applies to firms within the scope of those rules, which covers most firms subject to the Money Laundering Regulations 2017.

The MLRO typically also acts as the firm’s nominated officer, the person who receives internal suspicious activity reports and decides whether to report them to the National Crime Agency. The two roles are legally distinct, but at most firms one person holds both. The MLRO is expected to report to senior management and the board at least annually on the operation and effectiveness of the firm’s anti-money laundering systems and controls, and supervisors read those reports closely.

Personal criminal liability

This is what sets SMF17 apart from every other designation. Beyond regulatory accountability under the Duty of Responsibility, a nominated officer in the regulated sector can commit a criminal offence under the Proceeds of Crime Act 2002 by failing to make a required disclosure. The offence carries a maximum sentence of five years’ imprisonment. Candidates understand this well. Firms recruiting into the role sometimes do not, and a brief that does not mention it will not attract the right people.

Combining SMF16 and SMF17

At smaller firms, one person often holds both designations. The FCA accepts this where it is proportionate, and for many Core firms it is the sensible structure. It works when three conditions hold.

Enough time. Compliance oversight and financial crime oversight are both substantial workloads. At a firm with complex products, higher-risk customers or significant transaction volumes, one person may not be able to do both properly.

The right mix of experience. Strong compliance generalists are not automatically strong financial crime specialists, and the reverse is also true. A combined holder needs genuine depth in both.

Real authority. A combined SMF16 and SMF17 holder is often the firm’s entire second line. If they lack direct access to the board, or the standing to challenge commercially attractive decisions, the firm has no effective second line at all.

As a firm grows, the combined model can quietly stop being proportionate without anyone deciding to under-resource the function. Reviewing it periodically is part of good governance.

A Note on Payments and E-Money Firms

Authorised payment institutions and e-money institutions are regulated under the Payment Services Regulations and the Electronic Money Regulations rather than as Part 4A FSMA firms, so the SMCR does not apply to them in the same way. They still need a capable MLRO under the Money Laundering Regulations and strong compliance leadership, and the FCA assesses those individuals closely during authorisation, but the roles are not formally SMF16 and SMF17. The skills overlap heavily, and many of the strongest candidates have worked on both sides. Firms should still be clear which regime they are recruiting under, because it affects both the approval process and the candidate pool.

What a Strong Candidate Looks Like

The regulator assesses candidates against the FIT criteria: honesty, integrity and reputation; competence and capability; and financial soundness. For SMF16 and SMF17, competence depends heavily on sector.

Sector-specific experience

An MLRO from a retail bank, a wealth manager and a crypto firm will each have worked with very different financial crime risks. A compliance officer who has run a monitoring programme for an investment firm may be underprepared for consumer credit, where affordability and forbearance dominate. The best candidates have direct experience of the firm’s product set, customer base and permissions, and can explain the specific risks those create.

Evidence of independent challenge

The regulators look for SMF16 and SMF17 holders who can show they have challenged the business, escalated concerns and recorded what they did. Referencing should probe for concrete examples: a product that was changed on their advice, a customer relationship that was exited, a report to the board that the business did not want written. Our guide to FCA enforcement trends explains why documented challenge matters so much under the Duty of Responsibility.

Current regulatory fluency

The compliance landscape has moved quickly: the Consumer Duty, the 2026 SMCR reforms, changes to how breaches of the Conduct Rules are reported, and new regimes such as cryptoassets. A candidate whose knowledge stopped moving several years ago will struggle in a supervisory meeting.

The Team Behind the Designation

An SMF16 or SMF17 holder is only as strong as the people and information behind them. Regulatory returns, client money reconciliations and financial crime management information are often produced by the finance function, and weaknesses there become the compliance holder’s problem. Our pieces on the finance team behind your SMF16/17 holder and who supports your SMF16 and SMF17 on regulatory reporting cover this in detail.

Permanent, Fractional or Interim?

Not every firm needs a full-time SMF16 and SMF17. A smaller firm with a proportionate compliance burden can be well served by an experienced fractional holder, provided they have enough time allocated and direct access to the board. Every firm, whatever its model, needs a plan for unexpected departures. Since the April 2026 reforms, firms using the 12-week rule have 12 weeks to submit an application for the person covering, rather than to obtain approval, which makes a properly considered interim appointment far more achievable. A fractional or interim holder still needs full approval, and one working across several firms needs approval at each of them.

Our fractional and interim SMF cover service places SMF16 and SMF17 specialists on this basis, and our guide to when interim and fractional appointments work sets out where the model succeeds and where it creates risk. Firms going through authorisation should also see our SMF authorisation support, since a strong, named compliance and MLRO candidate materially strengthens an application.

Recruiting SMF16 and SMF17

A strong brief states the firm’s permissions, products and customer base, its financial crime risk profile, whether the roles will be combined, and the reporting line and board access the holder will have. Candidates should be assessed against the fit and proper standard from the first conversation, with sector experience, evidence of challenge and current regulatory fluency all tested before shortlisting. Compensation varies considerably by sector and firm size. Our guide to what SMF roles pay in 2026 sets out current benchmarks. For the wider framework, see our guide to Senior Manager Functions explained, and for live roles, visit our jobs page.