Aviva has been slapped with an £8.2 million fine for failings linked to the protection of client assets.
The Financial Conduct Authority (FCA) said Aviva Pension Trustees UK and Aviva Wrap UK did not have the right controls in place after outsourcing the administration of its custody assets.
Mark Steward, the FCA's director of enforcement and market oversight, said: "Aviva outsourced the administration of client money and external reconciliations in relation to custody assets, but failed to ensure that it had adequate controls and oversight arrangements to effectively control these outsourced activities."
The FCA said Aviva breached the Client Assets Sourcebook (CASS) rules between January 1 2013, and September 2 2015.
It said the insurance giant failed to put in the place the right controls over third party administrators (TPAs) and did not "sufficiently challenge" the performance and resources of the TPAs.
Aviva was also delayed in discovering risk and compliance problems linked to the TPAs because it did not provide enough resources and technical expertise to enforce CASS rules.
The FCA said it had discovered issues with Aviva's internal reconciliation process, leading to under and over-segregation of client money.
It added that under-segregation peaked at £74.4 million between February 10 2014, and February 9 2015.
"Other firms with similar outsourcing arrangements should take this as a warning that there is no excuse for not having robust controls and oversight systems in place to ensure their processes comply with our rules when CASS functions are outsourced," Mr Steward said.
"This is the first CASS case in relation to oversight failures of outsourcing arrangements and we will continue to take action against firms that fall short of our CASS rules."
Aviva was handed a 30% discount on its fine after reaching an early settlement with the FCA, meaning it will pay £8,246,800 instead of £11,781,262.