What’s in the April 2026 Handbook Update
The FSA's description of the April 2026 AML/CFT Handbook update is "minor updates." That is accurate as far as it goes. There is no structural overhaul here, but minor does not mean inconsequential and the timing of these particular changes is consequential.
There’s a lot going on this year in the regulatory world and the Handbook changes form an important part of that mosaic.
The Handbook landed on 1 April. The proliferation financing thematic questionnaire relaunched at the same time. A BRA thematic desk-based inspection programme starts in May. The Moneyval on-site assessment arrives in the autumn. And there is now a hard deadline of 1 September 2026 to have your NRA integration documented, reviewed, and board-approved.
Read in that context, the April update looks less like housekeeping and more like the final piece of a framework being pulled into position ahead of a significant international assessment. Here is what actually needs your attention.
Proliferation financing
The April Handbook makes explicit that the Code's requirements apply to countering the financing of proliferation as well as money laundering and terrorist financing. What has changed is the emphasis. Proliferation financing now needs to be expressly addressed in your business-wide and customer-level risk assessments, not treated as implied within your broader AML/CFT analysis.
The FSA's Phase 3 proliferation financing questionnaire has just been reissued. The FSA’s Moneyval preparation seminar in March flagged IO 11 (proliferation finance) as a specific area of focus, with the explicit advice that firms should not be caught not knowing what it is or how it applies to their business. If your BRA currently treats PF as a footnote rather than a standalone consideration, that needs to change before the questionnaire lands on your desk.
The practical step is straightforward: add a dedicated proliferation financing section to your BRA and CRA that records how PF risk has been considered, what it means for your specific client base and service lines, and what controls you have in place. It does not need to be long.
The 1 September deadline: NRA
integration has a time obligation
The April Handbook requires that firms review, digest, and incorporate the full suite of NRA findings into their BRA by 1 September 2026, with updates adopted and approved by the board as soon as practicable thereafter.
Some flexibility is available where your BRA review cycle means board sign-off falls slightly after that date. But the outer limit is the Moneyval on-site in the autumn, and the expectation is clear: by the time assessors arrive, your BRA should reflect the current NRA suite, and your board should be able to show it has considered and approved the updated assessment.
The NRA suite now covers money laundering, terrorist financing, proliferation financing, and non-profit organisations, with sectoral assessments for TCSPs, estate agents, and others. The Handbook is explicit that all relevant topical and sectoral NRAs must be considered, not just the main national assessment.
De-risking: blanket exits are not defensible
The April update expands the Handbook's treatment of de-risking to state more directly that blanket de-risking is not compatible with a risk-based approach. Account closure, restriction, and exit decisions must be demonstrably case-specific, well-governed, and supported by documented reasoning. Excluding entire customer categories without individual assessment is not risk management. The Handbook says so plainly.
This has particular implications for retail-facing businesses and any firm that has been managing its risk profile by tightening its client acceptance criteria without documenting why individual exits were warranted. The FSA has referenced the UK FCA's March 2026 Retail Banking Report in this context, linking blanket de-risking to financial inclusion concerns that Moneyval will be looking at directly.
If you have made account or client exit decisions on a category basis rather than a case-by-case basis, it is worth reviewing whether your documentation supports the individual decisions, not just the policy.
Financial inclusion and CDD flexibility
A smaller but worth-noting change: the April Handbook gives stronger emphasis to financial inclusion within the CDD framework, particularly where customers may be unable to provide standard identification documents. This dovetails with the message in relation to blanket de-risking. Alternative approaches are permitted where justified on a risk-sensitive basis, provided the Code minimums are met and the rationale is documented.
For most regulated businesses on the Island this will not require significant procedural change. But if your CDD procedures currently have no flexibility for customers who cannot provide the standard document set, it is worth confirming that there is a documented escalation path and alternative evidence route available.
Simplified measures: don’t be scared to use them
The April Handbook continues to develop the framework around simplified measures and CDD concessions, and the Moneyval context makes this particularly timely. At the industry preparation seminar in March, the FSA confirmed that the appropriate use of simplified measures is actively encouraged by Moneyval where risk genuinely warrants it. The FSA will be running a dedicated webinar on simplified measures during the summer.
The point is not to apply simplified measures defensively or apologetically but to apply them as part of your risk based approach where they are warranted. A firm that never applies simplified measures in a client base that clearly includes lower-risk relationships is demonstrating that it does not understand the risk-based approach, which is precisely the wrong message to be sending in the current climate.
Check that your procedures include appropriate simplified measure routes where genuinely warranted, that the risk basis is documented, and that your team understands when and why they apply.
What to do now
The April 2026 update is not a compliance emergency. It is, however, a prompt for focused action before the September deadline and the autumn on-site.
Update your Handbook version reference from December 2025 to April 2026. Add a dedicated proliferation financing section to your BRA and CRA. Confirm that your BRA reflects the current NRA suite and schedule board sign-off before 1 September. Review any recent de-risking decisions for documented individual reasoning. Check your simplified measures procedures are fit for purpose.
None of that should take long for a firm with a well-maintained compliance framework. And if it does take longer than expected, that is useful information in itself.
If you missed the December 2025 Handbook update, there is a companion article on the Regulus website covering those changes, including the BRA and TRA combination clarification, the updated CEP test, and the introducer identity verification point.
