Familiarity Breeds Risk? (IOM LPA NRA 2026)

The Isle of Man has spent decades building a robust regulatory framework. The risk-based approach is embedded and the shift to impact supervision is maturing. When MONEYVAL last assessed the Island, the feedback was pointed but, in its way, a compliment: good framework, now show us you're using it.

That observation landed on the FSA with real weight, and as I explored in my article on whether governance is the regulator's next focus, the pressure rolls downhill to industry. The question being asked with increasing frequency is not whether your compliance framework exists, but whether it actually does anything.

The Island's first standalone Legal Persons and Arrangements National Risk Assessment, published in April 2026 in advance of a new MONEYVAL assessment, takes that question and sharpens it considerably. The assessment is detailed, data-rich, and candid. The money laundering threat is rated high. The national vulnerability, set against the strength of the Island's controls, is rated medium.

So far so good, you might think, but the evaluation doesn’t stop there. The NRA goes on to identify the framework as a double-edged sword, a critical line of defence but also a potential point of failure.

That vulnerability, the part of the picture that the Island's otherwise strong framework cannot fully address, is Industry.  Professional firms, lawyers, accountants, TCSPs. The NRA is kind enough to distinguish between professionals who are complicit in financial crime and professionals who are simply not interrogating the structures and clients in front of them with sufficient rigour.

Business as usual 

The Island is, by design and by reputation, a place where trust structures, corporate entities, and multi-jurisdictional arrangements are not exotic or unusual, they are our bread and butter. The potentially risky structures set out in the NRA – a discretionary trust held in the Island with underlying assets overseas, beneficial owners in multiple jurisdictions, and a corporate layer or two in between are not a suspicious or unusual.

And that familiarity, accumulated over careers and across generations of practitioners, is precisely where the NRA locates the risk. We understand these structures. That is both the Island's greatest professional strength and, the NRA suggests, the place where its guard is most likely to drop. When something is unremarkable, it stops being interrogated.

When a structure type has been administered competently for twenty years, the questions that should still be asked at client take-on and at every periodic review can start to feel unnecessary. The answer is already known. The client is well understood. The structure is standard. Except that the standard structures are also the ones that the NRA specifically identifies as the vehicle of choice for the layering and obscuring of criminal proceeds. Not because they are inherently problematic, but because their very ordinariness makes them effective.

The NRA's recommended actions in this area are not directed solely at regulators or at law enforcement. They are directed at the industries that deal with and administer these structures every day, and they centre on one thing: understanding. Genuine, evidenced understanding of what a structure is actually doing, who is actually benefiting, and whether the picture presented bears real scrutiny.

That is a different exercise from completing a client risk assessment form. It requires the kind of active, enquiring engagement with a client file that busyness and commercial pressure tends to erode. It is also, the NRA makes clear, the place where the Island's defences are thinnest.

Don’t rest on your laurels

The good news, and there is good news, is that this is not a structural problem. The NRA isn’t highlighting any kind of systemic rot in the industry. It’s reminding firms to treat professionalism and knowhow equally as blessing and curse.

The NRA is a prompt to make sure that years of industry experience should result in deeper and more astute questions rather than a reason not to ask them at all. The structures that feel most routine are the ones that most deserve a fresh look. The clients who have been on the books the longest are the ones whose periodic reviews most need to be substantive rather than administrative.

The national framework is in good shape. What it cannot do is sit inside your client files and ask the questions you haven't asked. That part, as ever, is yours.

Timelines

There is a lot of really quite interesting detail in the LPA NRA (no, really) and it’s worth making the time to properly sit down and consider. It’s long, though, so start sooner rather than later as the clock to get the finer details integrated into your BRA has started and you only have until September 1st to get it finished.