The FCA is restructuring AML supervision. MTD for Income Tax is live. Cybercriminals have accounting firms in their crosshairs. Teams are stretched thinner than they’ve ever been. And clients, quietly, are starting to expect more than most practices are currently delivering.
Whether the pressure is regulatory, operational, competitive, or financial, it’s landing on UK accounting firms from every direction at once. Some of these risks are urgent. Some are slow-burning. And most are connected in ways that aren’t obvious until something goes wrong.
This post covers seven of them.
1. The FCA Is Raising the Bar on AML Compliance
For decades, AML supervision for UK accounting firms sat with professional bodies. ICAEW, ACCA, CIOT and 19 others handled oversight for their members. That system is ending.
The government has confirmed the FCA will become the single professional services supervisor for AML and counter-terrorism financing, replacing all 22 professional body supervisors. Around 60,000 firms fall within the scope. The FCA’s approach is categorically different from what firms are used to: data-driven, risk-based, and backed by the same enforcement powers it uses in financial services, including fines, skilled person reviews, and criminal prosecution where failures are serious enough. Firms will pay for this through a levy on top of existing professional body fees.
Here’s what the FCA will expect that most firms currently aren’t set up to demonstrate:
- Written policies with documented evidence that they’re actually being applied,
- Client risk ratings that are updated when circumstances change,
- Governance and training that reflects compliance as a live function,
Primary legislation is unlikely before late 2026, meaning full transition is not expected before 2028. But the gap between current AML practice and FCA expectations is wide. Closing it now is considerably easier than closing it under scrutiny.
Did You Know?
The FCA rejected 44% of firm applications to operate in financial services in 2023-24. The SRA, by comparison, accepted all applicants. That gap tells you everything about what’s coming. Here’s the full story – FCA Takes Over AML Supervision: What This Means for Accountants | FigsFlow
2. MTD Is Live. Most Client Bases Are Not Ready.
Making Tax Digital for Income Tax is now in effect for sole traders and landlords earning above £50,000. From April 2026, 864,000 sole traders and landlords enter the regime in this first wave. By April 2028, that number rises to almost 3 million as the threshold drops to £20,000.
Every one of those clients needs to be set up, explained, scoped, priced, and onboarded properly. That means:
- Updated engagement letters that reflect quarterly obligations, not annual ones
- AML checks completed before work begins
- Software recommendations your clients can actually afford and use
- Pricing that accounts for four submissions a year, not one
- Most firms underestimate how much that adds up across a client base of any size.
Even then, the real risk isn’t missing a deadline. It’s losing clients you’ve held for years to a firm that was simply better prepared. MTD is creating a moment where long-standing client relationships are genuinely up for grabs.
FigsFlow helps you tackle most of that. From the first proposal through to AML checks, engagement letters, risk assessment, and e-signatures, you can onboard an MTD client in under 10 minutes of actual time. Here’s how the process actually works: Streamline Your MTD Client Onboarding Journey | FigsFlow
3. Overstretched Teams Are a Professional Indemnity Claim Waiting to Happen
Experienced practitioners are leaving UK accountancy faster than they’re being replaced. At the same time, AI is handling more of the routine work, which sounds like progress until you realise it’s also justifying leaner teams. The result is fewer people carrying more responsibility, and in many firms, those people are the junior ones.
That’s where professional indemnity risk (the legal and financial exposure a firm faces when a client suffers loss due to negligent advice) starts to build.
A junior staff member advises beyond their competence because no senior is available to review the work. A client in a complex situation gets a standard answer. An error goes undetected because supervision has thinned out. The claim arrives months later.
This is worse in firms that have expanded into advisory without building the supervision structures to support it. Advisory work requires professional judgement. Getting it wrong is expensive. And stretched teams are exactly the wrong environment for it.
4. Accounting Firms Are a Prime Target for Cybercriminals
Every quarter, around 100 UK-based accounting firms report data breaches to the ICO (Information Commissioner’s Office). That’s only the ones reported. The actual number is considerably higher.
It’s not hard to see why. Accounting practices hold bank account details, national insurance numbers, tax records, payroll data, and corporate financials across hundreds of clients. That’s an extraordinarily high-value target, and cybercriminals know it.
The three attack types hitting firms hardest:
- Phishing emails impersonating HMRC or clients, increasingly convincing thanks to AI-generated content
- Ransomware that encrypts client files and threatens to publish stolen data before demanding payment
- Business email compromise, where attackers intercept payment chains and redirect funds
When a breach happens, the damage runs wider than the incident itself. ICO reporting obligations, potential GDPR fines, and client notifications all land at once.
5. Compliance-Only Firms Are Losing Ground Fast
The market is splitting in two. Firms that have moved into advisory work, built recurring revenue, and embedded technology into their workflows. And firms still doing the bread-and-butter work: VAT returns, annual accounts, basic tax, competing on price in a market where automation is making that work cheaper every year.
The gap between the two is widening fast.
Private equity consolidators, who now back nearly a fifth of the UK’s top 60 firms, are not buying compliance factories. They want sticky revenue, modern infrastructure, and genuine advisory capability. If you’re looking to sell in the next few years, this distinction directly affects what your practice is worth. If you’re not looking to sell, it still affects whether you can retain the clients and staff you already have.
6. Clients Now Expect More Than Accurate Returns
Client expectations have moved, and most firms haven’t moved with them. Accurate, timely compliance work used to be the differentiator. Now it’s the baseline. What clients actually want is a firm that communicates proactively, responds quickly, thinks commercially, and behaves like a business partner rather than a once-a-year necessity.
Most client churn doesn’t announce itself. By the time you notice it in your recurring fees, it’s already been happening for a while. Firms still relying on annual contact cycles, slow document processes, and reactive communication are giving clients a reason to look elsewhere, even when the underlying work is technically sound.
This is one of the most underestimated risks facing UK accounting firms, precisely because it doesn’t feel like a risk until the client is already gone.
7. Slow Onboarding Is Where Every Other Risk Gets Worse
There are two kinds of firms right now. Those leaning on AI to generate engagement letters and client documents, getting content out fast but losing the personal touch that builds trust. And those still doing it the old way: Word templates, manual AML checks, chasing signatures across email threads.
Either way, the process is slower than it needs to be.
While you’re editing a generated engagement letter, reviewing every paragraph to make sure it actually sounds like your firm, your competitor has already onboarded three new clients. That’s what an efficient onboarding process buys you: time, capacity, and the ability to take on more work without adding headcount.
That’s where FigsFlow comes in. Built specifically for UK accountants, bookkeepers, and tax advisers, it handles everything from proposals and engagement letters through AML checks, KYC, risk assessments, and e-signatures in one place. Your clients complete the full process in under 10 minutes of your actual time.
But words can only go so far. Why not book a demo and see for yourself?
Conclusion
UK accounting firms in 2026 are navigating more simultaneous pressure than ever before:
- The FCA is raising the bar on AML compliance
- MTD is live, and most client bases aren’t ready
- Overstretched teams are creating professional indemnity exposure
- Cybercriminals are specifically targeting accounting practices
- Compliance-only firms are losing ground to advisory-led competitors
- Client expectations have shifted faster than most firms have moved
- Slow onboarding is making all of it worse
None of this is a reason to panic. But it is a reason to act.
You don’t need to solve all seven at once. Start with the risks that resonate most with where your firm is right now. If your AML process isn’t audit-ready, start there. If clients are slipping away quietly, look at your client experience first. If onboarding is eating hours your team doesn’t have, that’s your starting point.
