The Source of funds "analysis" gap: What the SRA actually wants to see in your file notes
Published

There is a growing tension in the legal sector: the difference between having the right documents and doing the right compliance. While firms are increasingly diligent about collecting bank statements, recent regulatory reviews into Source of Funds (SoF) have highlighted a significant "analysis gap." It isn’t enough to gather evidence; you must record the reasoning behind accepting it.
The SRA’s latest thematic review into source of funds confirmed that this is a significant area of risk. While firms are increasingly diligent about collecting bank statements, the review found that 18% of files showed inadequate scrutiny. This suggests a widespread "analysis gap" where evidence is gathered, but the reasoning behind accepting it is never recorded.
Moving from a checklist to a risk assessment
The most common pitfall identified by the regulator is treating source of funds as a tick-box exercise. It is easy to assume that having a bank statement on file is enough to satisfy an auditor, but a document without context is just paper.
Regulators aren't just looking for a trail of PDFs; they are looking for your professional judgement. To pass an audit, you must move beyond simple document collection and prove that you have performed a genuine risk assessment. If a third party picked up your file tomorrow, they should be able to follow your logic without needing to ask you a single question.
The 3-step rationale framework
Closing the analysis gap doesn't require complex new processes. It requires a consistent habit of documenting your thought process. You can bridge this gap by using a simple three-step rationale for every source of funds check:
1. The source
Be specific about the origin of the money. Vague terms like "savings" are a red flag for auditors because they don't explain the activity that generated the wealth.
Example: Savings from a monthly salary accumulated over the last five years.
2. The evidence
Explicitly state what you reviewed and what it proved. This links the client's story to the hard data.
Example: Reviewed six months of bank statements showing consistent £3k monthly deposits from an NHS payroll.
3. The logic
This is the most critical step and the one most often missing from legal files. You must connect the dots between the evidence and the client's profile.
Example: The accumulated funds are entirely consistent with the client’s age, senior nursing role and declared lifestyle.
Quality over quantity
The SRA is not asking you to become a private investigator or to produce 50-page reports for every transaction. They are asking for a documented rationale that shows you have applied a "does this make sense?" test to the information provided.
By focusing on the factual story behind the funds, you move your firm from a vulnerable position to a defensible one. A well-documented file note is your best protection, proving that your compliance is an active, thinking process rather than a passive administrative task.
How Thirdfort can help
See how Thirdfort can speed up your Source of funds process so your team can spend less time chasing documents and more time on the high-value analysis that keeps your firm compliant.
Subscribe to our newsletter
Subscribe to our monthly newsletter for recaps and recordings of our webinars, invitations for upcoming events and curated industry news. We’ll also send our guide to Digital ID Verification as a welcome gift.
Our Privacy Policy sets out how the personal data collected from you will be processed by us.


