Financial firms scramble to capture emojis and voice notes as compliance rules tighten

The UK financial services industry is confronting a compliance crisis born of its own digital habits. Employees now conduct business through emojis, voice notes and messaging apps woven into daily workflows, while generative AI tools such as Microsoft 365 Copilot and ChatGPT are doubling the volume of content that must be captured, archived and reviewed. Regulators are responding with sharper teeth.

The Financial Conduct Authority has placed non-financial misconduct, bullying, harassment and discrimination, at the centre of its supervisory agenda, building on its Sexism in the City recommendations. At the same time, the Digital Operational Resilience Act (DORA) is raising the bar for operational resilience across Europe. Firms that fail to monitor these channels risk penalties that have already topped €5.65 billion under GDPR alone.

The data explosion

Gartner predicts that more than 80 per cent of enterprises will have deployed generative AI-enabled applications by 2026. Research from the Bank of England and the FCA shows three quarters of financial services firms already use AI. A single employee using these tools can easily double their output, creating a compliance challenge of scale rather than kind.

Informal channels compound the problem. Research from communications compliance specialist Smarsh found that 57 per cent of employees use emojis in client communications and 56 per cent frequently send voice notes for work. Capturing misconduct in these formats is notoriously difficult. In February 2025 Smarsh acquired CallCabinet to add advanced voice capture and analytics, using models that assess context rather than isolated keywords.

Trust and talent on the line

The stakes extend beyond regulatory fines. A 2024 Smarsh survey revealed that 63 per cent of UK financial services employees lack confidence in their organisation's monitoring systems, yet 66 per cent support using AI to detect non-financial misconduct. Separately, 78 per cent of employees said knowing that misconduct is actively identified and addressed influences their decision to stay with their employer.

"Compliance has evolved. It's no longer just about reacting to regulatory pressure, it's about staying ahead of risk," said Tom Padgett, President of Enterprise Business at Smarsh.

Younger professionals in particular are drawn to organisations that prioritise cultural integrity. Firms that ignore non-financial misconduct risk losing top talent alongside regulatory sanctions.

Technology as enabler, not replacement

Modern compliance platforms now capture communications across every digital channel in native format, preserving metadata, attachments and context. AI layers sift vast content volumes, analysing tone and context to flag potential risks early. Tools such as Smarsh Enterprise Conduct monitor for patterns indicative of bullying, harassment or cultural rot, whether in the phrasing of a voice note or the subtext of an emoji string.

"By helping financial services firms sift through the vast volumes of content now generated by regulated staff and analysing both the content and tone of such communications, these technologies can enhance regulatory compliance by identifying potential risks early," said Lucy McNulty, Editor and Host of Following the Rules, speaking at Smarsh Connect UK.

But technology alone is not a silver bullet. Shaun Hurst, Principal Regulatory Advisor at Smarsh, warned that sophisticated systems can generate thousands of false positives while missing genuine risks that require human judgment. Regulators expect firms to understand why alerts fire and how they are improving their programmes.

From burden to advantage

With the right investment, compliance infrastructure becomes a growth enabler. Advanced systems let employees communicate freely across approved platforms without fear of breaching rules, fostering a culture where ideas flow unimpeded. Senior leaders gain a holistic view of risk across the organisation, enabling proactive decisions that reduce the likelihood of breaches and reputational damage.

As the communications landscape continues to shift, the ability to capture, analyse and act on data is becoming a business imperative. In an industry built on trust, preserving the truth is not just a regulatory obligation, it is a competitive necessity.