The Hidden Risks of Unverified sales in regulated markets

On the Considerable Expense of Assuming Everything Is Probably Fine

There is a category of operational risk that is, in a specific sense, worse than the risks that organisations actively worry about. It is the risk that nobody is worrying about — not because it has been assessed and found acceptable, but because the assessment has not been done, the visibility does not exist, and the assumption that things are probably fine has been allowed to harden, through repetition and the absence of immediate consequences, into something resembling a compliance strategy.

Unverified sales in regulated door-to-door markets occupy precisely this category. The energy supplier whose agents are completing sales without adequate consent verification, the telecoms operator whose field teams are recording customer agreements that customers do not subsequently recall making, the charity whose door-to-door fundraisers are recruiting direct debit mandates from people who are not entirely clear what they have signed up to — none of these organisations typically describes itself as running an unverified sales operation. They describe themselves as busy, as operating in a challenging recruitment environment, as balancing compliance requirements against commercial pressures. The distinction between these self-descriptions and the operational reality is, from a regulatory perspective, largely semantic.

The risks embedded in unverified sales processes are, in almost every case, considerably larger than the organisations carrying them appreciate — not because the risks are exotic or unpredictable, but because they are structural, compounding, and almost entirely invisible until the moment they are not. That moment, when it arrives, tends to arrive with the regulatory equivalent of a knock at the door, which is ironic given the channel involved.

What Unverified Actually Means

It is worth being precise about what constitutes an unverified sale in the door-to-door context, because the term covers a range of practices whose individual severity varies but whose aggregate effect on an organisation’s risk profile does not.

At the most straightforward end, an unverified sale is one where the customer’s agreement to the proposition — the energy switch, the telecoms contract, the charity direct debit, the lottery membership — has not been confirmed through an independent process after the doorstep interaction. The agent records the sale, the form is submitted, the direct debit is established, and nobody at any point subsequently confirms with the customer, through a medium they control and in the absence of the agent, that they understand what they have agreed to, that they entered into the agreement freely, and that the terms as recorded accurately reflect what they were told. The sale proceeds on the basis that the agent’s record of it is accurate, which it usually is, and the small proportion of cases where it is not are identified only when the customer complains, which some do and many do not.

This baseline level of non-verification represents a risk that regulated markets have, in aggregate, found unacceptable — which is why welcome call processes, digital confirmation flows, and independent post-sale verification have been mandated or strongly expected across energy, telecoms, and charity fundraising. The organisations that have implemented these processes in substance rather than merely in form — that treat post-sale verification as a genuine quality check rather than a box-ticking exercise conducted in a way that minimises friction and maximises confirmation rates — have demonstrably better compliance profiles, lower cancellation rates, and fewer regulatory interventions than those that have not.

At the more serious end, unverified sales shade into something that the regulatory framework treats with considerably less patience: sales where the verification process exists on paper but is conducted in a manner designed to confirm rather than genuinely check, where customer confusion about what they have agreed to is a predictable outcome of how the sale was conducted rather than an occasional aberration, and where the aggregate of individually deniable practices produces a population of customers whose informed consent to the transaction is, examined honestly, rather more theoretical than actual.

The Compounding Problem That Finance Committees Don’t Model

The financial risk model that most organisations apply to unverified sales is, in its standard form, a cancellation rate assumption applied to a revenue forecast. If a certain percentage of sales cancel within the cooling-off period, the revenue model is adjusted accordingly, and the compliance team is tasked with keeping the cancellation rate below a threshold that the commercial team has established on the basis of what the model can absorb. This approach is not without logic. It is, however, missing several terms from the equation.

The cancellation rate that appears in the model captures only the customers who cancel. It does not capture the customers who do not cancel but who were mis-sold, who harbour a grievance that has not yet been expressed, and who represent a latent liability that will crystallise at some future point in a form that is considerably more expensive than a straightforward cancellation. The customer who was confused about what they agreed to but allowed the direct debit to proceed may raise a complaint six months later when they review their bank statement. They may contact a price comparison service or a consumer advocacy organisation. They may, in the energy sector, be one of several hundred similar customers whose aggregate experience triggers a regulatory review. The probability of each of these outcomes, applied to the population of questionable sales that unverified processes allow to proceed, represents a liability that the standard financial model does not price.

The regulatory cost of a pattern of unverified mis-selling is similarly absent from most financial models, because it is treated as a tail risk rather than an expected cost — something that might happen, rather than something that will happen at some point if the underlying process is not addressed. The energy sector’s experience with large-scale redress programmes, the telecoms sector’s recurring engagement with Ofcom over switching practices, and the charity sector’s periodic encounters with the Fundraising Regulator over door-to-door conduct all suggest that treating regulatory intervention as a tail risk in a sector with an active regulatory posture is a modelling assumption that history has not been kind to. The organisations that have experienced significant regulatory consequences for unverified or inadequately verified sales were, almost without exception, organisations that knew at some level that their verification processes were not robust and chose, explicitly or implicitly, to continue.

The Vulnerability Dimension and Why It Changes the Risk Profile

The regulatory framework that governs door-to-door sales in all three sectors has, in recent years, placed increasing emphasis on the treatment of vulnerable customers — not as a supplementary consideration to be addressed once standard compliance is achieved, but as a primary obligation that sits alongside and in some respects supersedes the general requirements around consent and disclosure.

Unverified sales processes interact with vulnerability risk in a way that compounds both. A verification process designed to confirm the integrity of a standard sale is not, by default, designed to identify the customer for whom the sale should not have been made at all — the person whose cognitive capacity, emotional state, or financial circumstances made them unsuitable for the product or susceptible to an approach that fell within the letter of the regulatory requirements but not their spirit. The welcome call that asks whether the customer understood the terms of their energy switch does not necessarily identify the customer who understood the terms but whose decision was influenced by a level of social compliance with the agent on the doorstep that did not reflect a genuine, independent exercise of choice.

Post-sale verification that is genuinely designed to catch these cases requires a different kind of process — one that goes beyond confirmation of terms to include assessment of the quality of the decision-making process through which the agreement was reached. This is considerably harder to implement at scale than a standard confirmation call, and it is considerably more valuable in terms of the risk it identifies and prevents. In the charity sector, where the Fundraising Regulator’s requirements around the protection of people in vulnerable circumstances have become more specific and more enforceable, the organisations whose verification processes include genuine vulnerability screening have a compliance profile that their peers relying on standard confirmation processes do not.

The Data Trail That Verification Creates — and Its Absence Doesn’t

One of the less-discussed consequences of inadequate sale verification is its effect on the evidential position of the organisation in the event of a dispute, a complaint investigation, or a regulatory enquiry. This is not the most emotionally resonant dimension of the compliance argument, but it is one of the most practically significant, because the organisations that have found themselves on the wrong side of regulatory proceedings have frequently found their position substantially weakened by the absence of the evidential record that a proper verification process would have generated.

A sale that has been verified through a documented, timestamped, independently conducted post-sale confirmation process generates an evidential record that answers the fundamental question of any mis-selling dispute — did the customer understand what they agreed to, and did they agree to it freely — in a way that is accessible, credible, and difficult to challenge. A sale that proceeded without such verification leaves the organisation in the position of relying on the agent’s record, which is simultaneously the most interested account available and the least independently verifiable one. In the event that the customer’s recollection of the interaction differs from the agent’s record — a situation that arises in a meaningful proportion of complaints — the organisation without independent verification evidence is in a considerably weaker position than the one that can produce it.

The data infrastructure that supports proper sale verification is, in this sense, not merely a compliance cost. It is an evidential asset, and its value is realised precisely in the situations that organisations tend not to plan for because planning for them requires acknowledging that they will occur. They will occur. The question is whether the organisation will be in a position to respond to them from strength or from uncertainty, and the answer to that question is substantially determined by whether the verification process was designed to create a defensible evidential record or merely to satisfy the requirement to have a verification process.

The BraynBox Model of Verification by Design

The approach that BraynBox takes to sale verification in its lottery and fundraising platform reflects a design philosophy that treats verification not as a process bolted onto the end of a sale but as an integral component of the sale itself — one whose outputs are captured, structured, and retained in a form that serves both the immediate compliance purpose and the longer-term evidential and analytical purposes that a robust operational record enables.

In a charity lottery context, the verification requirements intersect with lottery licensing obligations, direct debit scheme rules, and fundraising regulatory standards in a way that demands more than a generic verification process can reliably provide. The BraynBox platform manages this intersection by capturing the specific data points required by each regulatory framework at the appropriate point in the member recruitment and onboarding journey, generating confirmation communications that satisfy the content requirements of each applicable standard, and retaining the complete record in a form that is accessible for governance and regulatory purposes without requiring manual reconstruction.

The post-sale confirmation flow in BraynBox is designed to be genuine rather than performative — to create conditions in which a member who did not fully understand what they agreed to on the doorstep has a clear, low-friction opportunity to clarify or withdraw before their first payment is taken, and in which the organisation receives an honest signal about the quality of the recruitment interaction rather than a confirmation rate inflated by a process designed to minimise attrition rather than maximise informed consent. This distinction between a verification process designed to serve the customer and one designed to protect the conversion rate is not subtle in its long-term consequences, and the organisations that have chosen the former find that the short-term reduction in confirmed sales is more than offset by the improvement in retention, the reduction in complaints, and the considerably more comfortable relationship with their regulator.

The Systemic Risk That Individual Compliance Cannot Address

There is a final dimension of the unverified sales risk that deserves emphasis because it is the one most commonly underestimated by organisations whose compliance thinking focuses on the individual interaction level. Unverified sales processes create systemic risk — risk that is qualitatively different from the aggregate of individual interaction risks and that requires systemic rather than individual responses.

When an organisation’s verification process is inadequate, the unverified or inadequately verified sales that result are not randomly distributed across the agent population. They cluster around specific agents, specific management approaches, specific territories, and specific operational conditions that the absence of verification data makes invisible. The agent who is generating a disproportionate share of the problematic sales is not identifiable from conversion rate data alone. The territory where community characteristics are creating a pattern of superficially compliant but genuinely questionable sales is not visible without the post-sale data that proper verification generates. The management approach that is, in practice, prioritising volume over quality in a way that the stated compliance policy does not sanction is not detectable without the longitudinal data that connects recruitment behaviour to post-sale outcomes.

The systemic risk embedded in unverified sales processes is therefore not merely the aggregate of the individual risks those sales represent. It is also the risk of blindness — of not knowing where the problems are concentrated, which means not being able to address them, which means allowing them to compound until they become visible in a form that is considerably more expensive than the verification infrastructure that would have surfaced them earlier.

Real verification, implemented properly, does not just reduce the risk of individual bad sales. It illuminates the operational landscape in a way that allows systemic issues to be identified and addressed before they become defining features of the organisation’s regulatory relationship. This is, ultimately, what a compliance function is for — not to process complaints, but to prevent them, and the prevention of complaints in door-to-door regulated markets begins, reliably and specifically, with knowing what was actually said at the door and whether the person on the other side of it actually understood.

The sale that nobody verified is the sale that nobody can defend — and in a regulated market, the inability to defend a sale is, eventually, rather more expensive than the cost of having verified it in the first place.