If your firm’s digital journey makes it easier for a customer to buy a high-risk product than to cancel a subscription, you are actively breaching the FCA Consumer Duty.
This guide from Compliance Consultant provides a step-by-step protocol for identifying and removing sludge practices from your digital acquisition and servicing journeys. By bringing your UI/UX testing into conformity with the FCA Consumer Duty, specifically the consumer understanding and consumer support outcomes, you can eliminate deceptive design patterns that artificially hinder customer decision-making. We detail how to benchmark your current digital friction, adapt your governance framework, and choose the right compliance execution model to keep your platforms audit-ready.
Identifying sludge in the digital acquisition journey
Digital customer acquisition pathways are under intense scrutiny by the Financial Conduct Authority (FCA). A professional regulatory compliance firm must focus on how modern transaction flows influence decision-making. The regulator expects compliance functions to actively audit user interfaces, ensuring that digital friction does not cause systemic consumer harm.
To begin an audit of your digital platforms, your compliance team should inspect for these primary friction points:
- Obscured cancellation pathways or forced phone calls to exit digital-first products.
- Deceptive design patterns, often called dark patterns, that nudge consumers toward higher-margin options.
- Timeliness friction that delays critical consumer actions, such as cooling-off period exits or fee transparency lookups.
The regulator’s supervisory focus has shifted away from simply reviewing static paper disclosures. Instead, it now target the actual behavioral economics of digital applications and web-based transaction screens. In July 2025, the FCA published a critical Research Note: Digital design for financial products and services detailing the direct consumer impact of user interface friction.
The research proved that even minor changes to layout, font sizing, and choice placement can distort comprehension. For example, pre-selecting high-cost options or making cancellation processes circuitous directly undermines a consumer’s ability to act in their own best interest. If your digital team operates without compliance oversight on UI design, your firm risks severe penalties and reputational damage.
Good friction vs. bad friction (sludge)
To build a compliant digital platform, firms must distinguish between helpful, protective friction and harmful sludge. The FCA does not require the complete elimination of friction. Instead, it mandates that friction must only exist to protect the consumer, never to trap them in a product or obscure financial downsides.
The table below outlines how to distinguish and classify these different types of friction across your digital platforms:
| Friction type | What it looks like | FCA outcome alignment | Key tradeoff |
|—|—|—|—|
| Protective friction | Cooling-off warnings, extra confirmation clicks for high-risk trades | Consumer understanding | Reduces conversion speed but ensures informed consent |
| Deceptive design | Pre-selected checkboxes for add-ons | Price and value | Drives short-term revenue but guarantees regulatory intervention |
| Sludge practices | 15-minute digital application, 45-minute phone wait to cancel | Consumer support | Traps retail customers; severely penalizes vulnerable consumers |
Documenting the intent behind every click in your customer journey map is an essential task for compliance teams in the UK. Positive friction supports the consumer by highlighting critical information, such as risk warnings or fee breakdowns, before a purchase is finalised. For instance, requiring a customer to actively type “I understand” before executing an unregulated investment is a compliant use of protective friction.
Conversely, negative friction is designed to serve the firm’s commercial interests at the expense of the client. This includes hiding the “cancel account” button behind multiple sub-menus or requiring a written letter to close an account that was opened online in seconds. You can review how similar principles apply to fee structures in our analysis of how a mid-sized wealth manager restructured legacy fees for FCA fair value rules.
A practical protocol for removing sludge
To systematically cleanse your digital channels of harmful friction, you must implement a structured, repeatable audit protocol. This process must connect directly with your existing compliance monitoring programme.
Your team should execute the following actions as part of your ongoing governance:
- Conduct a gap analysis of your current digital user journeys against the four Consumer Duty outcomes.
- Implement split-testing for quality assurance to ensure UI changes do not accidentally create new sludge.
- Integrate sludge-monitoring into your management information (MI) and oversight reporting.
Conducting the gap analysis
Your gap analysis must map every click, screen transition, and wait time from initial marketing exposure to contract termination. To make this process workable, Compliance Consultant recommends using our standard review methodology.
We structure this work around our three-stage implementation philosophy:
- Engage: Establish and define the precise regulatory requirements before any technology or layout infrastructure is built.
- Execute: Drive rapid process and organisational change in parallel with technical developments.
- Embed: Integrate compliance into real-world operations by testing and scaling these systems across all customer departments.
During the engage phase of your gap analysis, compare your actual customer pathways against the foundational requirements outlined in FCA Compliance Explained. If you discover that your digital-onboarding takes three minutes but cancellation requires an off-platform telephone call, you have a major gap that must be resolved in the execute phase.
Testing and quality assurance
Once gaps are identified, your product team will naturally propose UI updates. Compliance must oversee the testing of these changes before they go live. A common error is assuming a simplified screen automatically improves comprehension.
Use A/B split-testing to compare the old journey against the new, compliant design. Measure whether customers actually understand the key terms of the product under the new design. Your test parameters should measure comprehension rates, completion times, and drop-off rates at critical risk warnings.
Updating management information
To satisfy the regulator, your findings must be fed directly into your firm’s governing body. The FCA’s non-Handbook guidance, FG22/5: Final non-Handbook Guidance for firms on the Consumer Duty, stresses that firms must actively monitor support outcomes. This means your board must receive regular reports showing customer service metrics, such as telephony drop-out rates and average times to exit.
These metrics must be captured and structured to support the drafting of your annual board report. The regulator expects to see concrete evidence of how your monitoring has identified and resolved sludge. For a detailed breakdown of these expectations, refer to the official update on Year 2 Consumer Duty Board Reports: progress and what comes next | FCA. Using resources like our Consumer Duty / Operational Resilience Toolkit simplifies this documentation process, giving your board the template structure needed to evidence compliance.
Comparing compliance models for Consumer Duty oversight
Managing digital sludge and meeting ongoing Consumer Duty obligations requires consistent resource allocation. Many mid-sized financial firms struggle to balance these heavy governance requirements against their daily operational tasks. Selecting the right execution model is a critical decision for your leadership team.
The table below outlines the primary models available to UK firms, comparing costs, targets, and key operational tradeoffs:
| Execution model | Best for | Price range | Key tradeoff |
|—|—|—|—|
| DIY via templates | Firms with an experienced, dedicated compliance officer | £199 (Toolkit only) | Internal team remains the single point of failure |
| Silver Retainer (Compliance Professional) | Established firms needing proactive compliance management and professional-grade templates | £795–£895/month | Response SLA is 1 business day; no strategic board reports drafted |
| Gold Retainer (Compliance Partner) | Firms requiring complete template access, 4-hour response SLAs, and strategic board-level support | £1,345–£1,495/month | Higher upfront commitment but replaces full-time headcount costs |
The cost of full-time oversight
Employing a full-time compliance manager in the UK carries a typical base salary of £60,000, with London-based roles averaging 20% to 40% more. When you add National Insurance contributions, pension provisions, recruitment fees, and equipment overheads, the true annual cost easily exceeds £84,000.
For many growing firms, this headcount represents a significant financial strain and introduces a single-point-of-failure risk if that individual leaves the business. You can read our detailed comparison of these operational risks in Comparing UK FCA compliance outsourcing models for mid-sized firms.
Choosing an outsourced retainer from Compliance Consultant removes these overheads entirely. For example, our Gold retainer, priced at £1,345 per month on an annual billing cycle, represents less than 17% of the cost of employing an in-house manager. This model guarantees budget certainty and grants direct, on-demand access to our panel of subject matter experts.
Evaluating outsourced retainer tiers
Our retainer plans are structured to match your firm’s specific scale and regulatory exposure. The Silver tier is designed for established firms that require structured compliance support. It includes eight hours of advisory support per month, a one-business-day response SLA, and full access to our digital template library, including the Compliance Risk Register with Heat Mapping and the Regulatory Horizon Scanning Tracker.
The Gold tier is tailored for firms that require hands-on, board-level support. It delivers 16 hours of advisory support per month, a guaranteed four-hour response SLA, and direct mobile access to a dedicated consultant.
Crucially for Consumer Duty governance, the Gold tier includes the drafting of your quarterly board compliance report and the delivery of your annual compliance monitoring programme. Gold clients also receive our complete library of high-value tools, including the Fair Value Assessment Framework and the Consumer Duty / Operational Resilience Toolkit, at no extra cost.
What most people get wrong
Even sophisticated compliance departments frequently misunderstand how the FCA assesses digital design and user support. These misunderstandings can lead to unexpected regulatory intervention.
Treating sludge as a marketing issue instead of a compliance breach
Many firms allow their product and marketing teams to control UI/UX design with zero compliance oversight. Product teams are naturally driven to maximise conversion rates, which often leads to the deployment of deceptive design patterns.
Compliance must have final veto power over any customer journey design. If a design choice exploits a customer’s cognitive biases or limits their understanding of risk, it is an outright breach of the Consumer Principle.
Ignoring the “sludge” impact on vulnerable customers
A multi-step, confusing cancellation screen might be a minor annoyance to a tech-literate consumer. However, for a consumer in vulnerable circumstances, such as someone experiencing cognitive decline or severe financial distress, it is a massive barrier.
The FCA’s Guidance on Consumer Support requires firms to pay particular attention to vulnerable groups. Your digital audits must specifically test how your user journeys perform for customers with different accessibility and cognitive needs.
Failing to update the annual compliance monitoring programme
Many firms treated Consumer Duty as a one-off project that concluded with the initial implementation deadlines. This is a critical mistake.
Sludge has a habit of creeping back into systems through routine app updates, software migrations, and marketing tweaks. Your compliance monitoring programme must contain automated, recurring reviews of your digital pathways to ensure they remain compliant over time.
To speak with a specialist regulatory consultant about your digital compliance requirements, email Compliance Consultant at info@complianceconsultant.org to book a free 30-minute discovery call, or contact our UK office directly on 0800 689 0190.
