GFSC issues its largest fine of £1.96m following a decade of AML failings and a fraud-cover-up risk.

The Guernsey Financial Services Commission (GFSC) issued a public statement on 12 March 2026 detailing enforcement actions against Utmost Worldwide Limited (the Licensee), Mr Leon Steyn, and Mr James Alexander Watchorn.

This follows an investigation launched in April 2023 into serious, systemic anti-money laundering (AML) and countering financial crime failings in the Licensee's life insurance business, spanning from 2015 to 2025.

LARGEST FINE

• Based on available records of GFSC enforcement actions, the £1,960,000 financial penalty imposed on Utmost Worldwide Limited (announced on March 12, 2026) is the largest discretionary financial penalty ever issued by the GFSC
• Before this, the highest documented penalty was £455,000 on Equiom (Guernsey) Limited in July 2024, which was described at the time as the biggest fine imposed by the GFSC.

EXECUTIVE SUMMARY

1. The GFSC imposed significant penalties and restrictions following the Licensee's underestimation of financial crime risks in its international life insurance operations, particularly unit-linked savings policies sold through unregulated brokers in high-risk jurisdictions (e.g., South and Central America).
2. Despite rating many clients as high-risk, the firm applied inadequate controls, relying heavily on ineffective trigger-event reviews rather than proactive ongoing monitoring, customer contact, or remediation.
3. This exposed the Bailiwick to unacceptable money-laundering and terrorist-financing risks.
4. Key failings included
1. Poor risk assessments,
2. Inadequate source of wealth/funds verification,
3. Delayed remediation of known issues (e.g., fraudulent documents from a broker affecting 1,900 clients, with 200 still unresolved after 10 years),
4. Ineffective screening for PEPs/adverse media/sanctions, and
5. Failures to meet transitional Handbook requirements by 2021.

ON 9 MARCH 2026, THE COMMISSION DECIDED:

• Financial penalty of £1,960,000 on Utmost Worldwide Limited.
• Financial penalty of £35,000 on Mr Leon Steyn (former CFO, later CEO).
• Financial penalty of £10,500 on Mr James Alexander Watchorn (former Deputy MLRO/Nominated Officer).
• Prohibition order under section 33 of the Enforcement Powers Law barring Mr Watchorn from
• Roles as Money Laundering Reporting Officer or Money Laundering Compliance Officer for 1 year and 5 months.

FAILINGS

1. These actions were taken under the Financial Services Business (Enforcement Powers) (Bailiwick of Guernsey) Law, 2020, with breaches of AML regulations (e.g., Schedule 3 to the Criminal Justice (Proceeds of Crime) Law 1999, the 2007 Regulations, the Handbook on Countering Financial Crime and Terrorist Financing), insurance laws, and the Minimum Criteria for Licensing.
2. The failings were deemed serious and long-standing, reflecting weak corporate governance.
3. Mitigating factors included the Licensee's full cooperation, early settlement, and a major remediation program started in late 2023 (new risk methodology, re-rating all clients, and cyclical reviews: 1/3/5 years for high/standard/low risk).

BACKGROUND

• Utmost Worldwide Limited (formerly Generali Worldwide Insurance Company Limited, incorporated 1993)
• Was licensed in Guernsey for general and long-term insurance, focusing on regular premium unit-linked savings.
• Acquired by Utmost Group in 2019, it shifted toward high-net-worth single-premium business.
• It entered run-off, with client numbers dropping from >80,000 to <40,000 (many in higher-risk jurisdictions such as South/Central America).
• Prior engagements with the GFSC in 2016, 2019, 2021, and 2022 flagged issues.
• Mr Steyn: CFO (2012–2020), Director (from 2019), CEO (from April 2020).
• Mr Watchorn: Deputy MLRO/Nominated Officer (from 2018 to 2025).

KEY FINDINGS

1. Inadequate Risk Assessments and Reviews
• 22,500 high-risk clients at peak, but only 3.5% (<4%, mainly PEPs/CEPs/adverse media) reviewed annually; most high-risk (jurisdiction-based) treated like standard/low-risk via ad-hoc trigger-events (e.g., surrenders/premium changes).
• Trigger-event reviews are often ineffective: missing updated SOF/SOW, overlooked adverse media, deferred remediation.
• Examples: Clients undetected as PEPs for years (e.g., 13 years in one case); outdated or poor-quality CDD.
2. Failure to Remediate Broker Fraud Issue
• In 2014, a South/Central American broker's employees fraudulently altered 1,900 clients' proof-of-address documents (recognised as major ML risk). New business was suspended (fully ceased by 2016), but remediation is slow; 200 clients remain unresolved as of 2024 despite repeated attempts.
3. Inadequate SOF/SOW Measures
• Sample of 72 high-risk files: 71 deficient in establishing/verifying SOF/SOW at onboarding and ongoing (e.g., no corroboration, reliance on old data).
4. Poor Ongoing Monitoring and Screening
• Failures in PEP/adverse media/sanctions detection (repeat issues noted by GFSC in prior visits).
• No regular system checks; database outdated.
5. Non-Compliance with 2019 Handbook Transitional Provisions
• Required full business relationship review by 31 Dec 2021, not completed.
6. Specific Concerns with Individuals
• Mr Steyn: Failed in oversight of risk assessments, SAR procedures, broker controls, and transitional compliance as CEO.
• Mr Watchorn: Downplayed ML red flags (e.g., large unsolicited payments, refusal to provide SOF, requests to redirect funds; high-risk jurisdiction client with uncorroborated wealth, rapid surrenders). Views on risks deemed below standards for his role.

SEVEN CUSTOMER EXAMPLES

1. Here is a concise summary of each anonymised client example (Clients 1–7) from the GFSC public statement on Utmost Worldwide Limited (dated 12 March 2026).
2. These cases illustrate specific AML/control failings identified during the investigation.
1. Client 1 (High-risk client onboarded in 2007): No review occurred until a trigger event in 2021 (14 years later). The 2021 review uncovered adverse media linking the client to tax evasion offences from 2012, information the Licensee was unaware of until then. Although the client was later cleared, this demonstrated a failure to maintain an up-to-date understanding of the client's risk profile through proactive monitoring or screening.
2. Client 2 (High-risk client onboarded in 2007): The client became a Politically Exposed Person (PEP) in 2008, but the Licensee's screening systems failed to detect this change. The PEP status remained unidentified until a trigger-event review in 2021 (13 years after the change), highlighting deficiencies in ongoing PEP/adverse media/sanctions screening and monitoring.
3. Client 3 (High-risk client onboarded in 2014, classified as a PEP): During a 2023 review, source of funds (SOF) information was not updated; the Licensee relied on data collected nine years earlier (from 2014). This showed inadequate refreshing or reconfirmation of SOF/SOW during reviews of high-risk relationships.
4. Client 4 (High-risk client onboarded in 2001, classified as a PEP): In a 2023 review, the client's ID was noted as a very poor-quality scan and outdated. The current address was unknown/missing. Remediation was deferred to the "next trigger," with no immediate action, illustrating failures in CDD quality, address verification, and timely remediation of deficiencies for high-risk/PEP clients.
5. Client 5 (Two high-risk clients onboarded in 2012, operating a manufacturing business in Asia): Multiple address and surname spelling inconsistencies across Asia, Holland, and Spain were not adequately investigated. In 2021, the clients made 8 unsolicited payments totalling USD 250,000 in just over 1 month (none applied to the policy). It took nearly a year to investigate. The clients refused to provide an updated SOF questionnaire and requested refunds to a different account than the original. An employee raised concerns, but Mr Watchorn dismissed them as "poor admin" and "poor communication" without a proper investigation. This overlooked multiple red flags: large unsolicited payments, SOF refusal, and redirection requests.
6. Client 6 (High-risk client onboarded in 2014, in a jurisdiction with heightened ML risk due to organised crime, drug trafficking, and corruption): Premiums rose from USD 10,000/month to USD 20,000/month in 2018 (USD 240,000/year). No online presence for the client's claimed company could be found (the client attributed this to security concerns in the jurisdiction), and income/wealth could not be corroborated. Employees raised concerns multiple times. Over the next 18 months, the client made five partial surrenders totalling USD 1,000,000 from a supposed 25-year savings plan and indicated having other insurance products elsewhere. Mr Watchorn dismissed concerns, citing continued premium payments and no adverse findings. This failed to address red flags adequately: a high-risk jurisdiction, uncorroborated SOF/SOW, multiple large surrenders shortly after setup, potential additional products that strain wealth claims, and a lack of company verification.
7. Client 7 (Client onboarded in August 2011): Became a PEP in 2018, but the Licensee's screening systems failed to identify the change at the time. It remained undetected until the Commission conducted its own screening in 2023 (five years later), exemplifying long-standing weaknesses in PEP detection and monitoring processes (a repeat issue flagged in prior GFSC engagements in 2016–2022).
3. These examples collectively demonstrate systemic issues: over-reliance on infrequent trigger-events, poor/inadequate screening, delayed or deferred remediation, failure to update/verify SOF/SOW, and insufficient escalation/appreciation of ML red flags, particularly for high-risk clients.

Aggravating and Mitigating Factors

• Aggravating: Systemic issues over ≥10 years; high volume of high-risk clients; governance weaknesses.
• Mitigating: Proactive remediation (new processes in place); cooperation and early settlement.

This case underscores the importance of robust, proactive AML controls in higher-risk insurance business models, especially legacy portfolios. The GFSC's actions aim to protect the Bailiwick's reputation as an international financial centre. For the full public statement, please see the official GFSC website announcement dated 12 March 2026.

Sources

https://www.gfsc.gg/news/utmost-worldwide-limited-mr-leon-steyn-and-mr-james-alexander-watchorn