The MLRO and the SMF17 Function

The Money Laundering Reporting Officer is one of the most important roles in any regulated firm. At firms within the Senior Managers and Certification Regime that are subject to the Money Laundering Regulations, the MLRO holds SMF17, a Senior Manager Function requiring FCA approval. The holder is accountable for the firm’s anti-money laundering systems and controls, and usually acts as the nominated officer who receives internal suspicious activity reports and reports to the National Crime Agency.

MLRO demand also extends well beyond SMF17. Payment institutions, e-money institutions and crypto-asset firms registered under the Money Laundering Regulations 2017 all need a nominated officer and, where appropriate, a senior person responsible for compliance with the Regulations. At those firms the MLRO isn’t an SMF17, but the FCA still assesses the individual and the role carries the same weight. SMF Capital recruits MLROs for both.

Our SMF16 and SMF17 guide explains the function in detail. This page is about hiring one.

What the Role Involves

• Owning the financial crime framework: the business-wide risk assessment, customer due diligence standards, transaction monitoring and sanctions screening.
• Suspicious activity reporting: receiving internal reports, deciding whether to report to the NCA, and handling consent requests.
• The annual MLRO report, giving the board a candid view of financial crime risk and the effectiveness of controls.
• Sanctions: making sure screening works and matches are handled correctly, with reporting to the Office of Financial Sanctions Implementation where required.
• Training and culture, making sure staff recognise and escalate financial crime risk.
• Regulatory engagement on financial crime, one of the FCA’s most consistent supervisory priorities.

Permanent, Interim and Fractional MLRO Appointments

Permanent

Firms with significant financial crime exposure, such as banks, larger payments firms and investment platforms, need a permanent MLRO who can lead a team, own the framework and build a relationship with the regulator over time.

Interim

Interim MLROs are often needed after a supervisory visit, a skilled person review or a backlog in due diligence or monitoring. The best interim MLROs combine hands-on remediation experience with the credibility to lead a function under pressure. Where a Senior Manager leaves unexpectedly, the 12-week rule allows temporary cover, and since the April 2026 reforms the firm must submit an approval application within those 12 weeks if the person covering is to continue.

Fractional

Smaller firms, particularly early-stage payments, fintech and investment firms, often use a fractional MLRO, sometimes combined with compliance oversight. It works when the individual has enough time for the firm’s volumes and genuine access to its data and systems. See fractional and interim SMF cover and our article on when fractional appointments work.

How We Run a MLRO Search

1. Brief against the Statement of Responsibilities. We start from what the new MLRO will actually be accountable for, including any Prescribed Responsibilities, not just the job title.
2. Direct, confidential search. Most strong candidates already hold roles and aren’t looking. We approach them discreetly, without naming your firm until the right point.
3. Fit and proper pre-assessment. Every candidate is tested against the fit and proper test before reaching your shortlist: prior approvals, regulatory history, directorships and financial soundness.
4. Shortlist and interview. Adrian Lawrence FCA interviews every shortlisted candidate personally. Our guide to interviewing an SMF candidate sets out the questions we use.
5. References and application. We start regulatory references early and support the approval application and Statement of Responsibilities.
6. Through approval to day one. We plan notice periods around the regulator’s timetable and stay involved until your new Senior Manager is in post.

What We Look For in MLRO Candidates

Relevant Financial Crime Experience

Financial crime risk differs sharply by business. An MLRO for a crypto-asset exchange needs blockchain analytics and transaction monitoring experience specific to crypto. An MLRO for a wealth manager needs strong source of wealth and politically exposed person experience. A payments MLRO needs to understand agents, merchants and fraud typologies. We match candidates to the risks they’ll actually manage.

Judgement on Suspicious Activity

We test how candidates approach reporting decisions, consent requests and difficult cases, because this is where the MLRO’s personal legal exposure is greatest.

Board Communication

A good MLRO report tells the board what it needs to know, not what it wants to hear. Candidates should be able to show how they’ve done that.

Managing Backlogs and Growth

Many MLRO roles involve firms whose growth has outpaced their controls. Experience of clearing due diligence or alert backlogs while keeping the business running is highly valued.

Qualifications

Qualifications such as ICA diplomas or ACAMS certification are useful evidence of knowledge, though experience matters more.

MLRO Recruitment by Sector

• Payments and e-money: safeguarding awareness, merchant and agent risk, fraud and authorised push payment scams.
• Crypto-assets: blockchain analytics, travel rule compliance and the move from registration to full authorisation.
• Banks and building societies: scale, complex monitoring systems and dual-regulated scrutiny.
• Wealth and investment: source of wealth, high-net-worth clients and politically exposed persons.
• Insurance: relevant mainly for life and investment-related business, since general insurance intermediation falls outside the Money Laundering Regulations.

Timing and Approval

Where the role is an SMF17, the FCA can take up to three months to decide a complete application. Where it isn’t, the firm must still tell the FCA who its nominated officer is, and the FCA will assess the individual where they’re a director or person responsible for management. Either way, the firm should never be without a nominated officer. Our SMF appointment timeline sets out the stages.

Other Senior Manager Roles We Recruit

SMF Capital recruits across every Senior Manager Function. Alongside this role, we have dedicated pages for Compliance Officer (SMF16), Chief Risk Officer (SMF4), Chair and Committee Chairs (SMF9–SMF14), Chief Operating Officer (SMF24) and Regulated Chief Executive (SMF1), and designation guides to every other SMF. We also run sector-specific searches for wealth managers, investment managers, consumer credit firms, insurers and MGAs, banks and building societies, payments and fintech firms and crypto-asset firms, and location searches in London, Birmingham and Bristol. Candidates can see every current role on our SMF jobs board.

Frequently Asked Questions

Does every firm need an SMF17?

No. SMF17 applies to firms within the Senior Managers regime that are subject to the Money Laundering Regulations. Firms outside the regime, such as payment institutions without FSMA permissions, still need an MLRO but not an SMF17. We’ll confirm what applies.

Can the MLRO also be the compliance officer?

At many smaller firms, yes. The individual needs the time and expertise for both. See our compliance officer recruitment page.

Can we use a fractional MLRO?

Often, yes, particularly at smaller firms, provided the individual has enough time and genuine access to the business. The FCA will want to understand the arrangement.

How quickly can you provide an interim MLRO?

Interim MLROs can often be introduced within days, subject to approval where the role is an SMF17. Permanent searches typically take three to five weeks to shortlist.