{
 "slug": "bound-engagement",
 "topic_id": "TOPIC-163",
 "cluster": "Law Firms, Courts & Fiduciary Disbursement Identity",
 "tier": "Tier B",
 "title": "Client intake as an AML control: verifying the human behind the engagement letter",
 "summary": "Engagement letters are signed electronically by whoever holds the email address. For matters involving funds movement or entity formation, the firm's record of who it onboarded is a click-to-sign audit trail.",
 "lede": "Two things happen at intake and they never meet. Someone collects an identity document, and someone else sends an engagement letter to an email address. The firm treats the combination as knowing its client. Nothing links the two.",
 "date": "2023-12-04",
 "category": "Compliance",
 "author_id": "elias-vanterpool-osei",
 "tags": [
  "client intake",
  "AML",
  "gatekeeper obligations",
  "engagement letter",
  "e-signature",
  "law firm compliance"
 ],
 "image_title": "Bound Engagement",
 "schema": "Article",
 "key_takeaways": [
  "E-signature platforms authenticate access to an inbox and record a click. Identity verification, where performed, is a separate step never cryptographically linked to the signature.",
  "Gatekeeper expectations on legal professionals continue to tighten internationally, and the evidentiary question is always the same: how do you know who you onboarded?",
  "Binding verification to the signing credential makes the two records one record."
 ],
 "body": [
  {
   "type": "h2",
   "text": "The intake desk"
  },
  {
   "type": "diagram",
   "kind": "flow",
   "alt": "Intake as a control, and what it actually verifies",
   "caption": "The programme rests on a step that verifies an email address.",
   "nodes": [
    {
     "label": "Prospective client makes contact",
     "note": "email"
    },
    {
     "label": "Engagement letter sent",
     "note": "e-signature"
    },
    {
     "label": "Signed by whoever holds the mailbox",
     "note": "identity assumed",
     "bad": true
    },
    {
     "label": "Matter opens, funds move",
     "note": "AML obligations attach",
     "bad": true
    }
   ]
  },
  {
   "type": "p",
   "html": "At a mid-size commercial firm, intake runs through a coordinator who has never met most of the clients whose files she opens. A prospective client emails. She runs a conflicts check, sends an engagement letter through the firm's e-signature platform, and receives it back signed within the hour."
  },
  {
   "type": "p",
   "html": "For matters that require it, she also collects identification — a passport scan, a certificate of incorporation, a beneficial ownership declaration. Those go into the file."
  },
  {
   "type": "p",
   "html": "Ask her how she knows the person who signed the engagement letter is the person whose passport is in the file, and she will tell you honestly that she does not, and that nobody has ever asked."
  },
  {
   "type": "h2",
   "text": "What an e-signature actually proves"
  },
  {
   "type": "p",
   "html": "A click-to-sign audit trail typically records: the email address the document was sent to, the IP address from which it was opened, a timestamp, and sometimes a code sent to that same email or to a phone number supplied by the signer."
  },
  {
   "type": "p",
   "html": "That establishes control of an inbox. Under electronic signature legislation it is sufficient for contract formation in most contexts, and that is a reasonable rule for ordinary commerce."
  },
  {
   "type": "p",
   "html": "It is a different proposition when the question is not whether a contract formed but whether a firm performed adequate customer due diligence on a person who subsequently moved money through its accounts."
  },
  {
   "type": "h2",
   "text": "The gatekeeper direction of travel"
  },
  {
   "type": "p",
   "html": "FATF guidance for legal professionals, and national implementations of it, treat lawyers as gatekeepers for defined activities — buying and selling property, managing client money, creating and managing companies and trusts, and certain financial transactions."
  },
  {
   "type": "p",
   "html": "Obligations differ sharply by jurisdiction and this article does not flatten that. What is common is the expectation that a firm can demonstrate who it onboarded, on what basis, and when — and that the demonstration survives examination."
  },
  {
   "type": "h2",
   "text": "The Bound Engagement"
  },
  {
   "type": "p",
   "html": "One change: make the identity verification produce a credential, and require that credential for the engagement signature."
  },
  {
   "type": "ol",
   "items": [
    "The client completes identity verification through whatever method the firm's risk policy requires — document verification, video, in person.",
    "That verification enrols a credential on the client's device, bound to the verified identity.",
    "The engagement letter is signed with that credential, over a canonical statement carrying the engagement terms hash and the matter reference.",
    "Later instructions on the matter — disbursements in particular — use the same credential."
   ]
  },
  {
   "type": "p",
   "html": "The firm now has one record instead of two unconnected ones, and every subsequent instruction on the matter is provably from the same principal it verified."
  },
  {
   "type": "h2",
   "text": "The consequence for the trust account"
  },
  {
   "type": "p",
   "html": "This is where the intake control pays for itself, and it is worth connecting explicitly. The phantom-client schemes that empty trust accounts depend on the disbursement instruction arriving from an email address rather than from a verified principal."
  },
  {
   "type": "p",
   "html": "A firm whose intake enrols a credential has already built the control that closes that decision point. Intake and disbursement are usually treated as separate problems by separate people; they are the same problem observed at two moments."
  },
  {
   "type": "h2",
   "text": "Scoping by risk, not by convenience"
  },
  {
   "type": "p",
   "html": "Not every matter needs this. Scope it where the gatekeeper activities and the fiduciary exposure actually sit:"
  },
  {
   "type": "ul",
   "items": [
    "Any matter where the firm will hold client funds.",
    "Entity formation and trust establishment.",
    "Real property transactions.",
    "Matters where the client relationship is entirely remote and documentary.",
    "Any matter flagged by the firm's own risk assessment."
   ]
  },
  {
   "type": "p",
   "html": "A litigation matter for a long-standing local client does not need it, and requiring it there will cost the firm goodwill it needs for the matters that do."
  },
  {
   "type": "h2",
   "text": "What this does not claim"
  },
  {
   "type": "p",
   "html": "It does not make a firm compliant with any AML regime, and no artefact does. Obligations are jurisdiction-specific and this article gives no legal advice."
  },
  {
   "type": "p",
   "html": "It also does not verify the truth of what a client says about their business or their source of funds. It verifies that the person giving instructions is the person the firm verified, which is a prerequisite to everything else and is currently absent."
  },
  {
   "type": "h2",
   "text": "Which matters justify a stronger intake"
  },
  {
   "type": "table",
   "caption": "Risk by matter type",
   "head": [
    "Matter",
    "Why it attracts misuse"
   ],
   "rows": [
    [
     "Entity formation",
     "Creates a vehicle with a professional's name attached"
    ],
    [
     "<strong style=\"font-weight:600\">Real estate closing</strong>",
     "<strong style=\"font-weight:600\">Large, irreversible, time-boxed</strong>"
    ],
    [
     "Settlement handling",
     "Funds through the client account"
    ],
    [
     "Routine advisory",
     "Low — no funds move"
    ]
   ]
  },
  {
   "type": "p",
   "html": "The distribution is uneven enough that a firm can apply a stronger intake to a minority of matters and cover most of the exposure. That is the practical form of a risk-based approach."
  },
  {
   "type": "h2",
   "text": "Objections and honest limits"
  },
  {
   "type": "p",
   "html": "<strong style=\"font-weight:600\">“We do identity checks on every new client.”</strong> Document checks, usually remote, against documents that are now cheap to synthesise. The question is whether the person who signed the engagement is the person those documents describe."
  },
  {
   "type": "p",
   "html": "<strong style=\"font-weight:600\">“Clients resist friction at intake.”</strong> On a routine advisory matter, reasonably. On a closing where they are about to send six figures, an additional gesture is proportionate and most clients understand why."
  }
 ],
 "faq": [
  {
   "q": "Does this replace our customer due diligence process?",
   "a": "No. It binds the output of that process to the signature, so the two records stop being independent."
  },
  {
   "q": "What about corporate clients with multiple signatories?",
   "a": "Each authorised signatory enrols, and the entity's delegation records who may instruct on what. That is better than the current position, where the entity is represented by whoever holds an inbox."
  },
  {
   "q": "Will clients resist?",
   "a": "Enrolment at intake is the moment of maximum client motivation. Firms that have tried it report far less resistance than partners predicted."
  },
  {
   "q": "Does this satisfy gatekeeper obligations?",
   "a": "That depends entirely on your jurisdiction and your regulator. This article does not give legal advice and no artefact confers compliance."
  },
  {
   "q": "What does an e-signed engagement letter verify?",
   "a": "That someone with access to an email address signed. Identity is assumed from the document checks run alongside it."
  },
  {
   "q": "Which matters deserve a stronger intake?",
   "a": "Those where funds move: closings, settlements and entity formation. Routine advisory work does not need it."
  },
  {
   "q": "Why re-assert at disbursement?",
   "a": "So the person who opened the matter and the person directing the money are demonstrably the same."
  }
 ],
 "sources": [
  {
   "t": "FATF publications",
   "u": "https://www.fatf-gafi.org/en/publications.html"
  },
  {
   "t": "FATF recommendations and guidance for legal professionals",
   "u": "https://www.fatf-gafi.org/en/publications/Fatfrecommendations.html"
  },
  {
   "t": "Electronic signature legislation and its evidentiary treatment."
  },
  {
   "t": "State bar alerts on phantom-client schemes, 2026."
  }
 ],
 "related": [
  {
   "slug": "trust-disbursement-control-stack",
   "title": "The phantom client and the trust account",
   "category": "Compliance"
  },
  {
   "slug": "filing-delegation-pattern",
   "title": "Filed under your bar number",
   "category": "Compliance"
  },
  {
   "slug": "claimant-authorization",
   "title": "Settlement disbursement",
   "category": "Compliance"
  }
 ],
 "image": "https://cdn.twc.sh/images/igcache/Bound%20Engagement/1500_900/blog.jpg",
 "wordcount": 1011,
 "url": "/blog/bound-engagement.html",
 "reading_time": "4 min read",
 "seo_title": "Client intake as an anti-money-laundering control",
 "meta_description": "Engagement letters are signed by whoever holds the email address. For matters moving funds, the firm's own intake is the weakest AML control.",
 "hub": {
  "slug": "topics/fiduciary-identity",
  "title": "Courts and fiduciary identity"
 },
 "answer": "It is treated as one and functions poorly as one. Engagement letters are signed electronically by whoever holds the email address, and for matters involving funds movement or entity formation the firm's own intake is the weakest link in its AML programme.",
 "answer_q": "Is the engagement letter an anti-money-laundering control?",
 "glossary": [
  {
   "term": "Engagement letter",
   "def": "The document establishing the retainer, and in practice the artefact a firm's intake control rests on."
  },
  {
   "term": "Risk-based approach",
   "def": "Allocating AML effort by assessed risk rather than uniformly — which requires knowing which matters carry it."
  },
  {
   "term": "Beneficial owner",
   "def": "The natural person ultimately controlling an entity, and the party an entity-formation matter can obscure."
  }
 ],
 "checklist": {
  "title": "Strengthening intake where it matters",
  "id": "intake",
  "desc": "Four steps.",
  "steps": [
   {
    "name": "Classify matters by whether funds will move.",
    "text": "The distribution is uneven and that is the opportunity."
   },
   {
    "name": "Enrol a credential at intake for the high-risk set.",
    "text": "Once, at the start of the relationship."
   },
   {
    "name": "Bind the engagement letter to that credential.",
    "text": "Not to an email address."
   },
   {
    "name": "Re-assert it at the disbursement.",
    "text": "So intake and payout are the same person."
   }
  ]
 },
 "cta": {
  "title": "Where this fits in Manav",
  "html": "Manav binds the authorising person to the exact instruction, filing or engagement, and produces a receipt a court, a counterparty or a regulator can verify without access to the firm's systems.",
  "href": "../docs.html",
  "label": "See legal receipts"
 }
}