ID and bank statements requested to a personal email
On the phone line, a member of staff asked us to email ID and bank statements to a personal Gmail address “because the secure upload is slow”. That puts client documents outside the accountancy firm’s systems. We report what the evidence shows; we make no claim about intent.
Evidence: The recording or thread, and the address, are attached in the full report.
Fix → Documents only through the secure upload; remind everyone who handles inquiries in writing this week.

