Sapia to Pay £19.6m After Client Money Controls Failed

The case, disclosed by the FCA in its Final Notice against Sapia, centres on a basic governance failure: the people who could authorise payments from client money accounts were the same people responsible for checking those accounts. That single lapse in segregation of duties, the regulator found, left client assets exposed to misuse for years.

The enforcement action lands at a moment when the FCA is publicly tightening its grip on the appointed representative (AR) regime and promising faster investigations. For any firm operating as a principal with ARs, the Sapia outcome is a case study in how control gaps around client assets can generate eight-figure liabilities.

What Sapia got wrong: segregation of duties and CASS failures

Sapia began working with WealthTek, then known as Vertus Asset Management LLP, in 2013, according to the FCA's press release. The firm later formally appointed WealthTek as one of its ARs, a relationship that ran from 2017 until WealthTek became directly authorised by the FCA on 28 January 2020.

During that period, Sapia held and was responsible for protecting client money arising from WealthTek's activities. Under Principle 10 of the FCA's Principles for Businesses, a principal firm must arrange adequate protection for clients. The Client Assets Sourcebook (CASS) sets out detailed rules on how firms must segregate, reconcile, and safeguard client money.

Sapia admitted that it failed to properly separate key roles within its business relating to client money, according to the FCA. Staff who could make payments from client money accounts also carried out the reconciliation checks required by CASS rules. The regulator's finding is unambiguous: this lack of separation "increased the risk that client money could be lost because of, for example, misuse or poor management."

"Poor safeguards around client money create opportunities that bad actors can exploit. Sapia's failures exposed clients to an unacceptable risk of losing their money," said Therese Chambers, joint executive director of enforcement and market oversight at the FCA.

The control weakness is neither exotic nor novel. Segregation of duties, the principle that no single individual should control all stages of a financial process, is a foundational internal control. Its absence in a firm holding client money is precisely the kind of gap CASS is designed to prevent.

The wider WealthTek web: Barclays, criminal charges, and special administration

Sapia's enforcement action is one strand of a broader regulatory and criminal response to WealthTek's collapse.

WealthTek LLP, which changed its name from Vertus Asset Management in January 2021, was placed into special administration on 4 April 2023 after the FCA ordered it to cease operations and appointed special administrators. Clients affected by the collapse have been pursuing recoveries through the administration process.

Separately, in December 2024, the FCA brought criminal charges against John Dance, WealthTek's former principal partner, for multiple offences including money laundering and fraud, according to the regulator. A trial has been scheduled for September 2027 at Southwark Crown Court. Dance has not yet stood trial; the criminal proceedings are ongoing.

The FCA also took enforcement action against Barclays Bank UK PLC, fining the bank £3,093,600 for poor handling of financial crime risks in relation to a client money account opened by WealthTek, the regulator confirmed. Barclays additionally agreed to make a voluntary payment of £6.3m for distribution to WealthTek clients with a shortfall in the money they have been able to reclaim.

The two enforcement actions interlock. Sapia's failures related to its oversight obligations as a principal firm; Barclays' failures related to its obligations as the banking institution holding the client money account. Both created conditions in which client assets were inadequately protected.

Taken together, the voluntary payments from Sapia (£19.6m) and Barclays (£6.3m) amount to nearly £26m directed towards WealthTek client redress. Of Sapia's payment, £19.1m will go to WealthTek's administrators for distribution to clients, while £500,000 will go to the Financial Services Compensation Scheme (FSCS) in accordance with its statutory duty to pursue recoveries. The FSCS has indicated it will distribute any surplus from further recovery actions to eligible WealthTek clients under the rules set out in the Compensation Sourcebook.

Fines versus redress: why the FCA accepted a voluntary payment

The FCA's decision not to fine Sapia merits close reading. The regulator stated that, were it not for Sapia's agreement to make the voluntary payment, with the assistance of its ultimate parent company, and its cooperation throughout the investigation, the FCA would have imposed a penalty of £7,412,000. That figure already reflects a 30% settlement discount for agreeing to resolve the matter.

The regulatory arithmetic is telling. A £7.4m fine would have gone to the Treasury. Instead, £19.6m goes to affected clients. The FCA effectively traded a smaller public penalty for a larger private redress, more than 2.6 times the counterfactual fine.

This approach signals a pragmatic shift in how the FCA weighs enforcement outcomes. Where a firm has the financial capacity, and the willingness, to compensate harmed clients directly, the regulator appears prepared to forgo fines in favour of faster, fuller redress. For firms facing potential enforcement, the message is that cooperation and voluntary compensation carry material weight in the FCA's calculus.

The speed of the investigation itself is also notable. The FCA stated it concluded the Sapia investigation in 12 months, citing it as an example of how the regulator is improving the pace of its enforcement work. The FCA has faced sustained criticism in recent years for the length of its investigations, and it has made public commitments to accelerate timelines. The Sapia case is one of the first concrete examples of that ambition in practice.

Lessons for firms using the appointed representative model

The appointed representative regime allows firms that are not themselves directly authorised by the FCA to carry out regulated activities under the umbrella of an authorised principal firm. The principal bears regulatory responsibility for the AR's conduct, including compliance with CASS where client money is involved.

The FCA has been tightening its oversight of this model since its 2022 consultation on improving the AR regime, which identified persistent weaknesses in how principal firms monitor their ARs. The regulator's concerns included inadequate due diligence, poor ongoing oversight, and insufficient controls over client money.

Sapia's case illustrates the practical consequences of those weaknesses. The firm's failure was not one of intent but of control design. The absence of segregation of duties, a control that any competent compliance function should identify as essential, left client money vulnerable.

For firms operating as principals with appointed representatives, the Sapia outcome carries several practical implications.

First, CASS compliance is non-delegable. A principal firm cannot outsource its responsibility for client money protection simply because the money arises from an AR's activities. The principal must ensure that its own internal controls, including reconciliation and payment authorisation processes, meet CASS standards.

Second, segregation of duties around client money must be genuine. Having the same individuals authorise payments and perform reconciliation checks is a textbook control failure. Firms should audit whether their current staffing and process design create any overlap between transaction execution and oversight functions.

Third, the financial exposure from AR failures can be substantial. Sapia's voluntary payment of £19.6m dwarfs the £7.4m fine that would otherwise have been imposed. Firms should consider whether their capital reserves and insurance arrangements are adequate to absorb the costs of an AR's misconduct.

Finally, cooperation matters in enforcement outcomes. The FCA's decision to censure rather than fine Sapia was explicitly linked to the firm's exemplary cooperation and willingness to compensate clients. Firms that find themselves subject to investigation should weigh the strategic value of early, constructive engagement with the regulator.

The criminal proceedings against John Dance remain ongoing, and the outcome of that trial, scheduled for September 2027, may shed further light on the circumstances of WealthTek's collapse. But the regulatory lessons from Sapia's case are already clear. Principal firms that treat AR oversight as a compliance formality, rather than an active governance obligation, do so at considerable financial and reputational risk.