AJC Strengthens Cyber Resilience in Mutuals
Mutual organisations continue to play a pivotal role in the UK financial landscape, and the need for robust cyber security...
Read MoreThe “Failure to Prevent Fraud” offence means that all organisations in the scope of the Act must pro-actively introduce measures to prevent fraud from being committed by associated individuals for the benefit of the organisation. [1]
The “Failure to Prevent Fraud” offence means relevant organisations are now criminally liable if: [2]
The offence applies to incorporated bodies, subsidiaries, partnerships, and certain non-profit and public organisations. Police forces and government departments are excluded from the scope.
If your organisation meets at least two of the following criteria it will now need to comply with the requirements of the Act:
If your organisation fails to implement adequate fraud prevention measures it risks criminal liability, which could mean substantial fines and reputational damage. The offence covers many fraudulent activities, including fraudulent trading, false accounting, and cheating the public revenue.
The legislation has a broad scope, meaning even foreign companies can be prosecuted if the fraudulent activity has a UK link – for example, involving UK victims or operations. [4]
To ensure your business complies with the new offence you need to implement a strategic, organisation-wide approach to fraud prevention starting from the top-down. Leaders must demonstrate a clear commitment to ethical conduct and actively promote an anti-fraud culture. This includes setting expectations across the organisation and ensuring anti-fraud policies are well communicated and properly resourced.
A thorough risk assessment is an essential starting place. You need to understand where and how your organisation is vulnerable to fraud, whether that be via internal processes, third-party relationships, or evolving operational models. Once you have clarity about the risks you may face, you can implement processes that are tailored and proportionate to the business – for example tightening financial controls, strengthening approval workflows, or enhancing oversight in high-risk areas.
Due diligence is vital. Employees, contractors, or agents who may represent the company externally should all share the organisation’s ethical standards if you want to prevent fraud.
Your staff need to understand the risks and how they should respond, so implement regular fraud awareness training and open communication channels to help embed a fraud-conscious culture throughout the business, also encouraging early reporting of suspicious activities. It is important that you continuously monitor and review prevention processes to ensure they remain effective and can adapt to new threats or operational changes. [5]
This is not just about having policies in place. Fraud prevention has to become an integral part of everyday business operations. Taking these steps will help your business avoid liability and strengthen organisational resilience and trust in the long term.
The introduction of the “Failure to Prevent Fraud” offence reflects a wider shift in expectations around corporate responsibility. It is a call to action. It is not enough for your organisation to be reactive, it must demonstrate that proactive, proportionate measures are in place to prevent fraud from occurring in the first place.
If you have not yet completed your preparations for compliance with the new offence and would like expert advice to augment your own resources without increasing headcount, the Fraud Risk Management team at AJC can help you. We have extensive experience in fraud prevention, compliance, and risk management. Our team includes leading specialists who have worked at the forefront of economic crime policy, regulation, and enforcement.
We support organisations across sectors to:
Whether you’re taking first steps towards compliance or reviewing existing measures, AJC can work with you to build a practical, tailored fraud strategy that reduces your risk exposure and supports long-term resilience.
Contact us on 020 7101 4861 or email us at info@ajollyconsulting.co.uk if you think we can help.
Sources
1. Offence of ‘failure to prevent fraud’ introduced by ECCTA. (2024, November 6). Retrieved from UK Government: https://www.gov.uk/government/publications/offence-of-failure-to-prevent-fraud-introduced-by-eccta
2. Extension of corporate criminal liability in the United Kingdom. (2025, May 28). Retrieved from Reuters: https://www.reuters.com/legal/legalindustry/extension-corporate-criminal-liability-united-kingdom-2025-05-28/
3. Everything You Need to Know About the New ‘Failure to Prevent Fraud’ Offence. (2025, May 29). Retrieved from EM Law: https://emlaw.co.uk/everything-you-need-to-know-about-the-new-failure-to-prevent-fraud-offence/
4. Failure to prevent fraud: key points from the Government Guidance. (2025, January 9). Retrieved from Stephenson Harwood: https://www.stephensonharwood.com/insights/failure-to-prevent-fraud-key-points-from-the-government-guidance
5. Failure to prevent fraud (and beyond): essential steps. (2025, March). Retrieved from Governance and Compliance Magazine: https://www.govcompmag.com/2025/03/26/failure-prevent-fraud-and-beyond-essential-steps
Mutual organisations continue to play a pivotal role in the UK financial landscape, and the need for robust cyber security...
Read MoreThe latest figures from UK Finance paint a troubling picture of the nation’s fraud landscape. In just the first six...
Read MoreThe Financial Conduct Authority (FCA) has criticised UK banks and payment firms for repeatedly missing key opportunities to prevent romance...
Read More