Client Assets Sourcebook Explained: What UK Businesses Need to Know About Client Asset Protection Rules

Holding client money or assets in your business is a big responsibility - and if you’re in the UK finance, investment, fintech, or wealth management sectors, you’ll probably have come across strict rules about how these assets need to be protected. That’s where the Client Assets Sourcebook (CASS) comes in.

The CASS rules aren’t just another piece of red tape. They’re there for a reason: to keep your clients’ money safe, give your business credibility, and help you stay on the right side of the Financial Conduct Authority (FCA). But we know legal jargon can make it all feel overwhelming, especially if you’ve just launched your firm or you’re new to regulated activities.

In this guide, we break down what the Client Assets Sourcebook is, why it’s crucial, and what steps you need to take to stay compliant - all in plain English. Whether you’re starting out or scaling up, understanding CASS is essential for building trust and avoiding legal headaches down the line. Let’s explore what it means for your business, and what you need to do to get client asset protection right from day one.

What Is the Client Assets Sourcebook?

The Client Assets Sourcebook, often called "CASS," is a set of detailed rules within the FCA Handbook. Its main purpose is to protect clients in the event that an FCA-regulated firm becomes insolvent, mismanages money, or faces financial difficulties.

If your firm holds or controls money or assets on behalf of clients - even temporarily - you’ll almost certainly need to comply. The rules are relevant for:

• Wealth and asset managers
• Investment and brokerage firms
• Insurance intermediaries
• Payment service providers
• Some fintech and proptech companies

Put simply, if your business is regulated by the FCA and deals with client money or assets, CASS affects you. It sets out exactly how to hold, record, report, and safeguard client funds - and the penalties for failing to comply can be severe (including hefty fines).

Why Are Client Asset Protection Rules So Important?

Trust is the foundation of any relationship with clients. Imagine if a major market player collapsed, and client funds were missing or mixed in with the firm’s own money. The financial and reputational damage could be huge, both for the individual business and for the wider sector.

Here’s why robust client asset protection matters for your business:

• Client trust: Secure asset handling builds confidence - essential for attracting and keeping clients.
• Legal compliance: FCA-regulated businesses must comply with CASS or risk fines, sanctions, and even loss of authorisation.
• Market reputation: Adhering to these rules signals to partners and investors that you take compliance seriously.
• Business continuity: Clear systems reduce the risks of errors, loss, or fraud and help ensure an orderly process if you ever wind down.

Many startup founders and SME owners underestimate the operational impact of these rules - but as your firm grows, strong compliance can actually make scaling easier and more attractive for future investors.

Who Needs to Comply With the Client Assets Sourcebook?

You need to comply with the relevant parts of CASS if:

• Your business is FCA-authorised (not just FCA registered for anti-money laundering)
• You hold or control client money or assets (even for just a short time)
• Your business model includes investment, payment services, or insurance intermediation

Some businesses may need to comply with CASS in full, while others may only need to follow certain sections (for example, only the client money rules or only the custody asset rules). In all cases, it’s your firm’s responsibility to know which CASS requirements apply to you - and to keep up with any changes or updates to FCA guidance.

If you’re not sure if your business is in scope, here’s a broader guide to UK business regulations, or contact our team for tailored advice.

What Are the Key Requirements Under CASS?

The CASS rules are divided into specific ‘chapters’ - for example, CASS 6 covers custody assets, while CASS 7 deals with client money. While each section has its own technical requirements, there are some core themes throughout the Sourcebook:

• Segregation: Keep client money and assets separate from your firm’s own funds at all times.
• Recordkeeping: Maintain detailed records (and reconcile them frequently) so client entitlements are always clear.
• Governance: Senior managers must take responsibility for compliance, including appointing a CASS Oversight Officer in many cases.
• Reporting: Firms are required to notify the FCA promptly of any breaches, errors, or issues.
• Risk assessment: Regularly assess your systems, controls, and risks relating to client asset handling.
• Client disclosure: Give clients clear written information about how their money will be held, any risks, and their rights.

Neglecting even one of these duties can create risk. For example, failing to reconcile your records could lead to “missing” client money that’s hard to trace in insolvency. The FCA expects all processes to be robustly documented, tested, and followed in practice.

How Can You Protect Client Assets in Your Business?

Getting CASS compliance right is as much about process as paperwork. Here’s a practical checklist to help you set up (or review) your systems for managing client assets:

1. Map Out Where Client Money or Assets Arise

Start by reviewing your business model. Where do you receive, hold, control, or make payments involving client funds or investments?

• Do you operate client accounts?
• Are you holding assets in custody?
• Do you use third-party payment processors or nominees?

Identify every “touchpoint” where responsibility could fall on your business.

2. Set Up Segregated Accounts and Reconciliation Systems

Open dedicated bank accounts (often called “client money” or “trust” accounts) with FCA-compliant banks. Never mix these funds with your company’s own assets.

Put regular reconciliation on the calendar, and use reliable software if possible. Your records should always reconcile with external bank or custody statements.

3. Update Contracts and Client Agreements

Make sure your client service agreements and customer onboarding documents clearly explain how your firm will handle and safeguard their assets or money, including:

• How client funds are treated if your firm fails
• Timelines for transfers, withdrawals, or return of assets
• Your rights (and limits) regarding client money

Having professionally drafted contracts is essential here - generic templates probably won’t cover your CASS duties. We recommend a legal review to ensure everything lines up.

4. Implement Robust Internal Controls

Internal controls help reduce human error and fraud risk. Set up:

• Clear roles and authorisation levels for transactions
• Dual control or approvals for withdrawals
• Periodic independent checks or audits

This supports good governance and can be a lifesaver if something goes wrong.

5. Document Your Procedures and Train Your Team

Your CASS procedures should be documented, accessible, and regularly reviewed. They should cover:

• How staff should process client funds/assets
• What to do in case of error, loss, or complaint
• How breaches are reported and rectified

Regular training is vital - everyone handling client money or assets should understand their personal responsibilities.

6. Appoint a CASS Oversight Officer (If Required)

Larger firms are required to have a designated CASS Oversight Officer - someone at senior manager level who is responsible for CASS compliance. Even if your business is small, one person should “own” the process internally and report to management.

7. Report to the FCA as Required

File any necessary reports (for example, CASS audit reports, breach notifications, or annual attestation) with the FCA. Make sure you’re set up for timely, accurate reporting - late or incorrect filings can attract enforcement action.

Common Pitfalls and How to Avoid Them

The FCA frequently finds the same mistakes in CASS reviews, especially among new or growing businesses:

• Poorly drafted or incomplete documentation (like weak agreements or process gaps)
• Delays in client money segregation (for example, sweeping funds too slowly into client accounts)
• No regular internal reconciliation (or failing to act on discrepancies)
• Inadequate staff training or unclear responsibilities
• Ineffective oversight or reporting (especially after rapid growth)

Avoid these issues by proactively reviewing your systems and updating them when your business operations change. Remember: it’s okay to ask for help - mistakes here can be costly, but good legal and compliance support will keep you on track.

How Does CASS Fit With Other UK Business Laws?

CASS is just one part of your business’s legal landscape. If you handle client assets, you’ll also want to be on top of other compliance areas:

• Data protection: How you store and use client data and records must be GDPR-compliant. Read more in our GDPR guide for UK businesses.
• Company structure: The way you handle client assets may be affected by your business model. Our guide to choosing a company structure outlines the pros and cons.
• Contracts and risk: CASS is only effective if your contracts and internal agreements support it. For practical contract-building tips, see our UK contract guide.

Regulated firms must meet all their legal duties. This holistic approach is vital for protecting your reputation and growing sustainably.

Getting Professional Help With CASS Compliance

Navigating the Client Assets Sourcebook can feel overwhelming, especially if you’re starting a new venture or changing your business model. The rules are detailed - and they do change from time to time, depending on FCA updates and sector best practice.

That’s why it’s smart to consult with legal and compliance experts early. We can help you:

• Identify which CASS requirements apply to your business
• Draft or review contracts (client agreements, terms, policies) that reflect your obligations
• Design practical, proportionate internal controls
• Prepare for FCA audits or deal with post-breach follow-up

Investing in strong legal foundations can help prevent investigations, fines, and (most importantly) the loss of client trust down the line. Read more about safeguarding your business from legal and regulatory risk.

Key Takeaways

• The Client Assets Sourcebook (CASS) sets out detailed FCA rules to protect client money and assets in UK-regulated businesses.
• CASS compliance applies to any business that holds or controls client funds or investments - not just traditional finance firms, but also startups and fintechs dealing with client assets.
• Core CASS requirements include segregation, recordkeeping, governance, reporting, and regular internal reconciliation of client assets.
• Practical compliance means maintaining dedicated bank accounts, documenting procedures, appointing oversight roles, and ensuring your team is trained.
• Poor contract drafting, weak internal controls, and lack of reconciliation are common pitfalls that attract FCA action - strong legal advice is essential.
• CASS is only one aspect of running a compliant business. You’ll also need to consider data protection, corporate structure, and robust contracts.
• It’s always wise to seek tailored legal and compliance guidance before holding or handling client assets, especially as regulations and business practices evolve.

If you want help understanding your CASS obligations, reviewing your legal documents, or setting up compliant processes for your business, you can reach our team at team@sprintlaw.co.uk or call us on 08081347754 for a free, no-obligations chat. We’re here to help you get it right, so you can focus on growing your business with confidence.