Client stories

What teams said after the fieldwork closed

These notes reference specific audits for fintech — readiness reviews, payment controls testing, AML sampling, and resilience walkthroughs. Voices vary; one includes a mild reservation about timing.

“Their compliance readiness audit caught gaps in our merchant onboarding checklist two months before our scheduled supervisory visit. The report was blunt about ownership, which our board needed to hear.”

Mei-Ling Chen · Head of Compliance, regional payments firm · Fintech Compliance Readiness Audit

“The payment controls assessment took longer than we hoped because our settlement files were messy, and they said so plainly. Once we cleaned the samples, the walkthrough of exception handling was the most useful half-day we have had with outside reviewers.”

James Wu · Finance Director, merchant acquirer · Payment Controls Assessment

“We asked for an AML programme review ahead of opening a new remittance corridor. Sampling showed incomplete beneficial-ownership notes on a handful of high-risk files. We delayed launch a fortnight and closed those gaps first.”

Hana Park · Operations Lead, remittance operator · AML Programme Review

“The resilience walkthrough forced our vendor managers to name who calls whom when a core processor goes dark. No glossy slides—just a clear communication tree we still keep on the wall.”

Tobias Lin · COO, consumer lending start-up · Operational Resilience Walkthrough

Longer engagement notes

Merchant acquirer — payment controls before year-end settlement cutover

The finance team wanted an external look at dual-control breaks ahead of a processor change. Our samples showed exception queues owned by a single operator on weekends. After the assessment, they split weekend coverage and rewrote the escalation phone tree. The work took four weeks because settlement archives arrived late — a friction they acknowledged in their own post-mortem.

Consumer lender — readiness audit ahead of a licence condition meeting

Board members asked for a severity-rated view of policy versus practice. We walked through collections scripts, hardship flags, and complaint logs. Two high findings related to overdue policy reviews; medium findings covered training attendance. Leadership used the remediation sequence to assign owners before the meeting. We did not attend the supervisory session — that remained their counsel’s role.

Discuss a similar engagement