Scope Q&A
UK nexus and scope Q&A for ECCTA failure-to-prevent-fraud screening.
A practical Q&A for legal, compliance, financial-crime, governance, and adviser teams collecting scope evidence before making customer-specific legal judgments.
1. Which organisations are in scope?
The Home Office guidance says the offence applies to large incorporated bodies and partnerships across sectors, including bodies incorporated or formed outside the UK where there is a UK nexus.
A scope screen should record entity type, incorporation or formation route, group structure, financial year, and the source used for each data point.
2. What is the large-organisation test?
The guidance describes a large organisation as meeting two or three criteria: more than 250 employees, more than GBP 36 million turnover, and more than GBP 18 million in total assets.
The screen should show which financial year was used, whether group aggregation was considered, and who reviewed the data. It should not make a final scope decision.
3. How does group aggregation affect the screen?
The Home Office guidance says the criteria apply to the whole organisation, including subsidiary undertakings, regardless of headquarters or where subsidiaries are located.
The file should distinguish subsidiaries from LLP networks, supply-chain companies, and franchises, because the guidance treats those categories differently for aggregation and associated-person analysis.
4. What is a UK nexus?
The guidance says a UK nexus is needed. It describes UK nexus as one act forming part of the underlying fraud taking place in the UK, or the gain or loss occurring in the UK.
If no part of the base fraud took place in the UK, the guidance note says actual gain or loss in the UK matters, not merely intended gain or loss.
5. Are overseas organisations ever in scope?
The guidance says overseas incorporated bodies and partnerships can be in scope where the UK nexus is present.
The workpaper should capture where the associated person acted, where gain or loss occurred, where clients or victims sit, and why the team thinks adviser review is or is not needed.
6. Who is not caught by the offence?
The guidance says unincorporated organisations other than partnerships are not in scope, and that the offence does not extend to individual liability for people within organisations who may have failed to prevent fraud.
A screen should also avoid assuming that every supplier, franchise, overseas subsidiary fact pattern, or customer loss creates scope. Record the uncertainty and the evidence to review.
7. What benefit requirement should the file capture?
The guidance explains that the underlying fraud must be intended to benefit the organisation or, in certain circumstances, its clients.
A good workpaper records the intended beneficiary, whether the organisation or client was the intended beneficiary, and whether the organisation may instead be a victim or intended victim.
8. What should go to advisers?
Unclear entity structure, mixed UK and overseas conduct, indirect gain or loss, uncertain associated-person status, and client-benefit questions should be labelled for qualified review.
DefenceFile can organise the screen and evidence trail, but it does not decide scope, UK nexus, liability, privilege, or statutory-defence success.