The Vulnerable Customer Gap: Why 75% of UK Financial Firms Lack Searchable FCA Evidence

UK retail and financial services firms are struggling to bridge the gap between regulatory confidence and operational reality regarding vulnerable customers. While 98% of businesses claim readiness for Financial Conduct Authority scrutiny, new research reveals that nearly two-thirds would require three or more working days to produce evidence of a single customer interaction.

What was announced

A study conducted by IP Integration (IPI) and Cavell, surveying 400 compliance, operations, and customer operations leaders, highlights a significant disconnect in how UK firms manage vulnerable customer data. While 94% of organisations have discussed regulatory readiness at the board level in the last six months, and 99% have conducted mock regulatory audits, the underlying systems for capturing evidence remain fragmented.

The research found that only 25% of businesses have vulnerable customer interactions automatically logged and searchable. The remaining majority rely on processes that are prone to delay and error:

• 27% of interactions are logged manually by staff.
• 25% of records are spread across multiple disparate systems.
• 23% of data is captured inconsistently.

This lack of automation has direct consequences for regulatory reporting. Under the Consumer Duty, the Financial Conduct Authority (FCA) requires firms to demonstrate good outcomes for vulnerable individuals. However, 63% of surveyed businesses admitted it would take three working days or more to retrieve and piece together a single customer record for a regulator. Only 4% of firms reported they could provide this evidence on the same day.

The pressure is compounded by new Buy Now, Pay Later (BNPL) rules introduced in July, which extend these expectations to a payment method now offered by 99.5% of the businesses surveyed. While 94% of firms were confident they could quickly evidence BNPL affordability or vulnerability decisions before the rules came into force, the focus has now shifted to the practical execution of capturing every touchpoint in the customer journey.

"Anyone can become a vulnerable customer. A bereavement, a health problem or a sudden drop in income can change someone’s circumstances overnight, and FCA research shows only four in ten people tell their provider when it happens. That means businesses need to be well-placed to recognise the signs and respond appropriately - not wait for customers to identify themselves as vulnerable."

Annabelle Goymer, Head of Customer Success at IPI

The companies involved

IP Integration, also known as IPI, is a UK-based customer experience specialist that focuses on the intersection of contact centre technology and regulatory compliance. The company provides tools and consultancy designed to help organisations in the retail and financial services sectors manage complex customer interactions. IPI’s market position is defined by its focus on "contact centre evolution," helping firms transition from legacy manual processes to automated, data-driven environments that meet modern governance standards.

The company operates in a landscape increasingly defined by the FCA’s Consumer Duty, which has shifted the burden of proof onto financial institutions to show they are proactively protecting customers. IPI’s role involves implementing the systems that capture, log, and analyse these interactions to ensure that firms can meet the "evidence of outcomes" requirement. By partnering with research firms like Cavell, IPI tracks the operational readiness of the UK's financial infrastructure, specifically focusing on how frontline staff are supported by technology during high-stakes conversations involving customer vulnerability and affordability.

What this means

The FCA has moved past the "implementation phase" of Consumer Duty and is now entering the "evidence phase." This announcement suggests that while the C-suite is confident in its policies, the middle-office infrastructure is suffering from significant operational debt. A three-day turnaround for a single interaction record is a liability in an era where regulators expect real-time transparency and data-led supervision. Firms relying on manual logging or fragmented systems are under immense pressure; they are essentially betting that they won't face a large-scale audit. The high adoption of BNPL across the sector further raises the stakes, as it introduces more frequent, high-velocity touchpoints that are notoriously difficult to track across the entire customer lifecycle. The industry is reaching a tipping point where "good intent" is no longer a valid defence against systemic data failures.