Welcome to the latest RACO Roundup for February 2026! We’re keeping you ahead and informed with essential updates in the world of law and compliance.
This month, we’re focusing on two critical areas: cybersecurity threats and COLP compliance responsibilities. As cyber-attacks become more sophisticated and regulatory expectations intensify, law firms must remain vigilant and ensure their compliance frameworks are robust and documented.
Below, you will find expert insights on the biggest cyber risks facing law firms in 2026, guidance on COLP responsibilities, followed by our Security Section with the latest scam alerts to help protect you and your clients.
The Biggest Cyber Risks Facing Law Firms in 2026
Cyber-attacks are becoming more prevalent, and law firms are among the most targeted victims, putting client data, business operations, and regulatory compliance at risk. Cybercriminals are getting smarter and more targeted, using AI, advanced social engineering tactics, and weaknesses in supply chains.
This article examines the five biggest threats law firms will face in 2026: AI-powered phishing and social engineering, deepfake impersonation, exploitation of multi-factor authentication, supply chain cyber risk, and insider threats. Firms must prepare now with robust cybersecurity policies, layered controls, regular training, and comprehensive incident response plans to meet regulatory obligations under the SRA Standards, UK GDPR, and professional indemnity insurance requirements.
Read the full story here.
COLP Compliance – Real-Time Checks and Recording Responsibility
If you have been nominated to be the Compliance Officer for Legal Practice (COLP) for your firm, you will be fully aware of the responsibility this places on you to ensure your firm is, and remains, compliant at all times with the SRA Standards and Regulations. However, the busier you become, the easier it is to allow this to fall by the wayside, or more worryingly, to overlook the need to record the actions you are taking.
The SRA’s December 2025 thematic review reinforces that the COLP role is intended to provide real-time checks and assurance of a firm’s compliance approach. This article provides practical guidance on implementing policies, recording activity, ensuring accessibility, deputising responsibilities, conducting audits, training staff, and reviewing procedures. Learn how to demonstrate compliance effectively and protect both your firm and yourself as COLP.
Read the full story here.
Security Section
Warning: Bogus Website and Correspondence from ‘Hackney, Goode & Associates’
Date: 5 February 2026
The Scam: A bogus website at ‘www.hackneygoode.co.uk’ is operating and falsely claiming to be a law firm offering various legal services including personal injury claims, civil litigation, family law, employment law, and property law. Correspondence has been sent from ‘Catherine Goode’ claiming to be the ‘Managing Partner’, offering assistance with settlement fund entries administered by The Burnley Magistrates Court Resolution Claims Department.
Fraudulent Contact Details:
• Website: www.hackneygoode.co.uk
• Email: info@hackneygoode.com, help@hackneygoode.com, report@hackneygoode.com, cgoode@hackneygoode.com
• Phone: +44 114463 0023, +44 207 046 0086
• Address: 28 Lawrence Rd, London, N15 4EG
The SRA does not authorise or regulate any firm called ‘Hackney, Goode & Associates’ or any individual named ‘Catherine Goode’. Any business through the above contact details is not undertaken by a firm or individual authorised by the SRA.
Read the full alert here.
Warning: Emails Misusing the Name of Complex Law Ltd
Date: 5 February 2026
The Scam: Emails have been sent purporting to be from ‘Alexis Thomas’ and ‘Lee Forbes’ regarding a supposed refund case. The emails misuse the name, logo, and address of a genuine firm of solicitors.
Fraudulent Contact Details:
• Email: alexis.t@complex-law.com, lee.f@complex-law.com
• Phone: +1 416 477 1731
Genuine Details:
• Firm: Complex Law Ltd (SRA regulated)
• Address: 17 Mann Island, Avenue, Mann Island, Liverpool, L3 1BP
• Email Domain: @complexlaw.co.uk (no hyphen)
The genuine firm has confirmed it has no connection to the fraudulent emails. Any business through the email addresses alexis.t@complex-law.com or lee.f@complex-law.com is not undertaken by any firm authorised by the SRA.
Read the full alert here.
Been Contacted by a Scammer?
If you’ve been contacted by any of these scams or received suspicious correspondence claiming to be from a law firm, always verify directly using established contact details before responding or taking any action.
BEEN CONTACTED?
Here’s What to Do…
When a firm’s or individual’s identity has been copied or cloned, due diligence is necessary. If you receive correspondence you believe to be suspicious, you should conduct your own due diligence by checking the authenticity of the correspondence by contacting the law firm directly by reliable and established means.
You can also contact the SRA directly to find out if individuals or firms are regulated and authorised by the SRA and verify an individual’s or firm’s practising details. Other verification methods, such as checking public records (e.g. telephone directories and company records), may be required in other circumstances.
Reach Out to RACO
We at RACO are always at hand to provide tailored guidance to help you make the most informed and beneficial decisions. We help you understand the recurrent regulatory shifts and work with you to provide solutions.
With our team of professional specialists and our renowned legal expertise, we can work with your firm to always ensure you are never left unprepared in the wake of legal changes or cyber threats.
For more information on how we can help:
Call us on 02039858550 or email us at info@regulationandcomplianceoffice.co.uk.
