← Back to Insights
Guides5 min read·

How to Build a Mortgage Client Onboarding Process That Actually Holds Up

Most mortgage advisers onboard clients differently every time, which creates compliance gaps and a poor client experience. This guide sets out a step-by-step process that covers every stage from first enquiry to post-completion, with Consumer Duty built in throughout.

C

Cleera Team

How to Build a Mortgage Client Onboarding Process That Actually Holds Up

Ask most mortgage advisers to describe their client onboarding process and you will get a broadly similar answer: they pick up an enquiry, arrange a meeting, gather information, make a recommendation, submit an application and keep the client updated until completion. Which sounds fine. The problem is what happens in between.

Onboarding is where the gaps are. It is where busy advisers skip steps, where documentation gets done retroactively, and where clients are left wondering what happens next. It is also where the FCA starts when it looks at whether your advice was suitable.

Consumer Duty has raised the bar considerably. Firms are now required to evidence that clients received the right information, at the right time, in a way they could understand, and that the outcomes they experienced were good. That standard runs from the moment a client makes contact, not from the point a suitability report is signed.

Getting onboarding right is not about doing more. It is about doing the same things consistently, in the right order, with the right records. This guide walks through every stage.


Step 1: Handle the first enquiry properly

The first enquiry is both a compliance touchpoint and a conversion moment. Most advisers focus on the second at the expense of the first.

When a new lead comes in, the immediate priority is responding quickly. Research consistently shows that the likelihood of converting an inbound enquiry drops significantly after the first hour. But alongside speed, there are a few things you should capture at this stage regardless of channel.

You need to know what the client is trying to do (purchase, remortgage, further advance), what kind of property they are looking at, the approximate loan size, their employment status, and whether they have any credit concerns they are already aware of. None of this is a full fact-find. It is pre-qualification, and it saves everyone time.

At this point, you also need to send or provide access to your Initial Disclosure Document (IDD). Under MCOB 4.4, the IDD must be provided to the client at the earliest practical opportunity, before you begin gathering information for regulated mortgage advice. It sets out who you are, what service you provide, whether you offer whole-of-market advice, and how you are paid. If you are not routinely sending this before the first meeting, that is a gap worth closing.


Step 2: Verify identity and complete AML checks before the meeting

Anti-money laundering checks are not optional and they cannot follow the advice appointment. Under the Money Laundering Regulations 2017, you are required to verify client identity before establishing a business relationship, which in practice means before proceeding with regulated mortgage advice.

For most clients this involves two forms of ID: one to confirm name and date of birth (passport, driving licence), one to confirm current address (utility bill, bank statement dated within the last three months). You should also document your source of deposit enquiry, particularly for purchase cases. Where is the deposit coming from? Has it been gifted? Is there a builder's incentive involved?

For remortgage cases where no new money is being introduced, your AML obligations are lighter but still present. You must satisfy yourself that the client is who they say they are and that there are no flags that require further investigation.

If your initial enquiry captures enough information to run a basic check before the appointment, you can use the meeting time for advice rather than admin. Electronically verified ID tools (Smart Search, Credas, First AML and similar) let you do this in minutes and produce an audit trail without asking the client to attend your office.

One area advisers sometimes overlook is Politically Exposed Persons (PEP) and sanctions screening. Most AML tools include this, but it needs to be run and documented. The FCA expects to see it.


Step 3: Run a thorough fact find, not just a form-filling exercise

The fact find is the foundation of everything. It is your evidence that you understood the client's circumstances before making a recommendation, and under MCOB 11.6.7, you must not make a recommendation unless you have gathered sufficient information to do so.

What "sufficient information" looks like in practice:

Income and employment. Employed clients: salary, frequency, any regular bonus or commission and how reliably it is paid. Self-employed: net profit, whether the business is growing or shrinking, years of accounts available. Contractors: day rate, contract length, gaps. Do not just take payslips at face value. Lenders assess income differently and you need to understand how each lender will treat your client's income before recommending one.

Outgoings and commitments. Credit card balances and minimum payments, personal loans, car finance, maintenance payments, childcare costs, and any other regular financial obligations. This feeds into affordability, but it also tells you something about the client's financial resilience.

Credit history. Most clients do not know their credit score in any meaningful detail. Ask whether they have had missed payments, defaults, CCJs, or any debt management arrangements in the last six years. If there are concerns, it is better to run a soft credit search now rather than hit a wall after submission.

Property details. For purchase cases: property type, tenure, construction, intended use, number of bedrooms, anticipated purchase price. For remortgage cases: current lender, outstanding balance, current rate and end date, current property value. For buy-to-let: anticipated rental yield, whether the property is currently tenanted, and the client's wider portfolio if they are an experienced landlord.

Objectives and priorities. What matters most to the client? Is it the lowest initial payment, the longest fix for security, the ability to overpay? These preferences need to be documented because they will form part of your suitability rationale.

Timescales. Is there a completion deadline? An existing property to sell? A product expiry date approaching? Time pressure affects your sourcing criteria and your lender selection.

Alongside all of this, the fact find is where you carry out your vulnerability assessment. Consumer Duty requires advisers to consider whether clients may have characteristics of vulnerability, and the FCA's four-driver framework (health, life events, resilience, capability) gives you a structure for doing so. This does not need to feel clinical. A simple, open question about whether anything in their personal or financial situation might be useful to know works well. What matters is that you asked, noted the answer, and acted on it where relevant. The previous guide in this series covers the vulnerability process in more detail.


Step 4: Research and source systematically

Once the fact find is complete, you have everything you need to research the market. The critical discipline here is documenting why you recommended what you recommended, not just what you recommended.

If your sourcing system produces a results table, keep it. If you excluded lenders on the basis of criteria (credit policy, LTV caps, income treatment), note that. If the client had a preference that narrowed the field (e.g. they wanted a specific offset feature, or a specific lender for relationship reasons), record that too.

Where a client declines protection at this stage, that also needs to be documented. The FCA does not require every client to take protection, but it does expect to see that it was discussed and that the client's decision was informed and recorded.


Step 5: Produce a suitability report that can withstand scrutiny

The suitability report (sometimes called a suitability letter, although this terminology is imprecise) is your written confirmation that the recommendation you made was right for this client, based on what you learned in the fact find.

Under MCOB 4.8, most mortgage advisers are required to provide a written suitability statement to the client. The common exceptions (execution-only, non-advised sales) rarely apply to a full advice process.

Your suitability report needs to address a few key areas. It should describe the client's circumstances as you understood them. It should explain the product you recommended and why it meets those circumstances: the rate type, term, lender, and any key features. It should explain why you ruled out or did not recommend alternatives. And it should address protection, even if only to note that it was discussed and declined.

The most common suitability report failures the FCA flags are: too generic (the same paragraph appears across dozens of cases), no rationale for lender selection, no record of declined protection, and no connection drawn between the client's stated priorities and the product recommended.

A concise, specific suitability report that explains the "why" in plain English is considerably better than a lengthy template-driven document that says nothing meaningful about this particular client.


Step 6: Manage the application and keep the client informed

Once the client has approved the recommendation and you have submitted the application, case management becomes the priority. This stage is where client experience is won or lost, and where communication gaps often lead to complaints.

A few things matter here. Clients should know what happens next at each stage: when to expect the mortgage illustration, when the valuation will be instructed, when to expect an offer, and what they need to do. If you are waiting on the client for documents, they need to know what they need to provide and why.

Keep a record of every significant communication: calls, emails, updates received from lenders. Not because you expect a dispute, but because a clear audit trail is the simplest way to demonstrate that the case was managed professionally.

If conditions come back from the lender, respond promptly. Offers expire. Valuations lapse. If there are material changes to the client's circumstances between application and offer (change of employment, additional borrowing, changes to the purchase price), you may need to revisit your suitability assessment.


Step 7: Post-completion is not the end of the process

Completion is not the natural endpoint of the client relationship, even though many advisers treat it as one. There are two things that should happen systematically after every case.

The first is a protection review. If the client declined protection earlier in the process, completion is a natural moment to revisit that conversation. Circumstances sometimes change; occasionally clients who declined initially are more receptive once they have taken on a significant financial commitment. This conversation needs to be documented either way.

The second is setting up a future contact point. Under MCOB, there is no formal requirement to contact clients at renewal, but the commercial case is obvious and Consumer Duty creates at least an expectation that you are acting in the client's long-term interest. Whether your contact point is six months before product expiry or at a fixed interval post-completion, the process needs to be in the system and not in your memory.

GDPR also applies here. Mortgage records must be retained for a minimum of three years under FCA rules, though many firms retain for longer given the potential for future liability. Client data should be stored securely, with clear policies on who can access it and how it is used for marketing.


A practical onboarding checklist

The following is not exhaustive, but it covers the critical compliance checkpoints at each stage.

Before the first meeting

  • Enquiry captured and responded to promptly
  • IDD provided or accessible to the client
  • AML identity verification completed
  • PEP and sanctions screening run and documented

During the fact find

  • Employment and income documented in detail
  • Outgoings and existing credit commitments recorded
  • Credit history discussed and documented
  • Property details gathered
  • Client objectives and priorities noted
  • Vulnerability screening completed and recorded

Recommendation and suitability

  • Sourcing results retained
  • Lender exclusions and rationale documented
  • Protection discussed and outcome recorded
  • Suitability report produced, specific to this client

Application and progression

  • Client updated at key milestones
  • All significant communications recorded
  • Conditions responded to promptly
  • Any material changes to client circumstances reassessed

Post-completion

  • Protection review completed or deferred with a date
  • Future contact point set in the system
  • GDPR-compliant data storage confirmed

Summary

A structured onboarding process does more than keep the regulator satisfied. It creates a consistent client experience, reduces the time spent chasing information across multiple cases, and makes it substantially easier to evidence suitability if a case is ever reviewed.

The advisers who manage this well have not necessarily done more work than anyone else. They have built the steps into their system so they happen automatically rather than relying on individual memory. The checklist above is a reasonable starting point, but the more important thing is to find a workflow that is repeatable, and then repeat it.


Cleera is built around the mortgage advice workflow from first enquiry through to case completion. If you want to see how it handles onboarding, document collection and case records in a single place, book a demo.

Try Cleera

Run your firm properly.

Full case pipeline, FCA-compliant audit trail, and AI-powered compliance checks — built for UK mortgage advisers.

Get started →

More from Cleera Insights