FCA Authorisation: Step-by-Step Guide to the Application Process

Understanding the FCA Authorisation Framework

Any firm wishing to carry on regulated financial services activities in the United Kingdom must obtain authorisation from the Financial Conduct Authority under Part 4A of the Financial Services and Markets Act 2000 (FSMA). Operating without authorisation, or exceeding the scope of your permissions, is a criminal offence under section 23 of FSMA, punishable by up to two years' imprisonment and an unlimited fine.

This guide provides a detailed walkthrough of the authorisation process, from initial planning through to the FCA's determination and your obligations as a newly authorised firm. The short version: confirm the exact permissions you need, build a complete application with a business plan, financial projections, governance and compliance documents, submit it on Connect with the fee, and the FCA then has 6 months to decide once it is complete.

Phase 1: Pre-Application Planning

Regulatory perimeter analysis: The first step is determining whether your business model requires FCA authorisation and, if so, which specific regulated activities and permissions you need. The FCA's regulatory perimeter is defined mainly by the Regulated Activities Order (RAO) 2001, together with the Payment Services Regulations 2017 and Electronic Money Regulations 2011, and covers categories including: - Accepting deposits - Issuing electronic money (EMI authorisation) - Payment services (payment institution authorisation) - Consumer credit (consumer credit authorisation) - Investment services (dealing, arranging, managing, advising) - Insurance distribution (insurance intermediary authorisation) - Mortgage lending and broking

Errors at this stage are costly. Applying for the wrong permissions delays the process; failing to apply for all necessary permissions may require a costly variation of permission application later.

Pre-application engagement with the FCA: The FCA offers pre-application support for some applicants, including through its pre-application support service and Innovation Hub, and pre-application meetings are expected for banks. These meetings allow you to: - Discuss your business model and the permissions you believe are required - Understand the FCA's expectations for your specific application - Identify potential issues early: before they become grounds for refusal - Receive guidance on the documentation and evidence the FCA will expect

Pre-application meetings are not mandatory but are strongly recommended, particularly for novel business models, complex group structures or applications involving multiple regulated activities.

Assembling your application team: Preparing an FCA application is a substantial project requiring input from: - Senior management (business plan, strategy, governance design) - Legal advisers (regulatory perimeter analysis, document drafting) - Compliance professionals (compliance framework design, policy drafting) - Finance (financial projections, capital adequacy calculations) - HR (SMF holder identification, fit-and-proper documentation)

Phase 2: Application Documentation

The FCA application pack typically includes:

Regulatory business plan: A comprehensive document setting out your business model, target market, product range, distribution channels, pricing strategy, revenue projections and growth plans. The business plan must demonstrate commercial viability and explain how the business model serves customer interests. The FCA will scrutinise any features that create risks of consumer harm: such as complex fee structures, high-risk products or aggressive growth targets.

Financial projections: Three-year (minimum) financial projections demonstrating the firm can meet its regulatory capital requirements, remain solvent and fund its operations without reliance on practices that could cause harm. Projections should include base case and stress scenarios.

Governance and management: - Organisational chart showing reporting lines, committees and key functions - Management responsibilities map (for SM&CR purposes) - Details of proposed SMF holders, including CVs, fit-and-proper questionnaires and Statements of Responsibilities - Details of controllers (persons with significant influence over the firm) and qualifying holdings

Compliance framework: - Compliance monitoring programme - Complaints handling procedures - Financial promotions approval process - Conflicts of interest policy - Conduct risk framework - AML/CFT policies and procedures (including business-wide risk assessment)

Operational infrastructure: - IT systems and security arrangements - Business continuity and disaster recovery plans - Outsourcing arrangements and due diligence on third-party providers - Client money or assets arrangements (if applicable)

Phase 3: Submission and Initial Review

Applications are submitted through the FCA's Connect system. Upon receipt, the FCA conducts an initial completeness check. If the application is incomplete, missing documents, insufficient detail or incorrectly completed forms, the FCA will return it without starting the assessment clock.

Common reasons for applications being returned at this stage: - Missing financial projections or capital adequacy calculations - Incomplete SMF applications or fit-and-proper questionnaires - Generic or templated policies that do not reflect the applicant's specific business model - Failure to address all relevant regulatory requirements for the permissions sought

Phase 4: FCA Assessment

Under section 55V of FSMA, the FCA must decide a complete Part 4A application, including a variation of permission, within 6 months of receiving it, and any application within 12 months of receipt. If an incomplete application is later completed, the 6 months run from completion but the total cannot exceed 12 months. Applications under the Payment Services Regulations 2017 and Electronic Money Regulations 2011 have a 3-month period once complete. Bank applications follow the same FSMA periods.

During assessment, the FCA evaluates the application against its threshold conditions (Schedule 6 of FSMA):

Effective supervision: Can the FCA effectively supervise the firm? Complex group structures, overseas controllers or opaque ownership arrangements may raise concerns.

Appropriate resources: Does the firm have adequate financial, human and technological resources to conduct its regulated activities? This includes capital, staffing, IT systems and compliance capability.

Suitability: Are the firm's management, governance arrangements and internal controls adequate? Are SMF holders fit and proper? Does the firm have a sound business model?

Business model: Is the business model viable and sustainable? Does it create unacceptable risks of consumer harm? The FCA will refuse applications where the business model depends on practices it considers harmful.

The FCA assessment process typically involves: - Detailed review of all submitted documentation - Written information requests (often multiple rounds) - Interviews with proposed SMF holders (particularly SMF1 and SMF16) - Assessment of fit-and-proper submissions for all proposed SMF holders - Review of the firm's financial position and projections

Phase 5: Determination

The FCA will either: - Grant authorisation: with the permissions sought (or a subset of them) - Grant authorisation with requirements: imposing conditions or limitations on the firm's activities (e.g., restrictions on product types, client categories or transaction volumes during an initial period) - Refuse authorisation: with written reasons and the opportunity for the firm to refer the decision to the Upper Tribunal

If the FCA is minded to refuse, it will issue a "Warning Notice" giving the firm an opportunity to make representations. If, after considering representations, the FCA still intends to refuse, it issues a "Decision Notice." The firm can then refer the matter to the Upper Tribunal for an independent determination.

Phase 6: Post-Authorisation

Early supervision: Newly authorised firms can expect closer supervisory contact in their first years, which may include: - Introductory supervisory meeting shortly after authorisation - Periodic check-ins to monitor the firm's progress against its business plan - Review of initial regulatory returns and complaints data - Potential on-site or desk-based assessments

Regulatory returns: From authorisation, the firm must submit regular regulatory returns, including financial returns, complaints data, transaction reports and (where applicable) client money and assets reports. Late or inaccurate returns are a common early trigger for supervisory concern.

Ongoing threshold conditions: The threshold conditions are not a one-off test. Firms must continue to satisfy them at all times. A material deterioration in financial resources, governance or compliance capability may result in the FCA varying or cancelling the firm's permissions.

Timeline and Cost Expectations

Timeline: - Preparation: depends on how ready the business plan, policies and people are - FCA decision: 6 months from a complete Part 4A application (3 months for payment and e-money applications), with a 12-month long-stop - A complete, specific application keeps the process on the FCA's own timetable

Cost considerations: - FCA application fee: set by fee category, from £280 (category 1) to £225,170 (category 10). For example, an authorised EMI pays £5,640 and a small payment institution £1,130 - Professional fees: we quote a fixed fee once the scope is confirmed - Capital requirements: vary by firm type, for example £75,000 to £750,000 for investment firms, €20,000 to €125,000 for authorised payment institutions and €350,000 for authorised EMIs

Practical Recommendations

Submit a complete application. The statutory clock runs from completeness, so every missing document or unanswered question adds time. A full, specific pack is the most reliable way to keep to the FCA's own timetable.

Invest in quality documentation. The FCA's assessment is document-driven. Well-drafted, specific and comprehensive documentation significantly increases the likelihood of a smooth assessment. Generic or templated materials will trigger additional questions and delays.

Prepare your SMF holders for interviews. FCA interviews with proposed CEO and compliance officers are common. Candidates should be able to articulate the firm's business model, risk profile, compliance approach and their personal understanding of regulatory requirements. Rehearsal is advisable.

Engage specialist advisers. While not mandatory, experienced regulatory advisers can significantly improve application quality and reduce timeline risk. Choose advisers with specific experience in your sector and the permissions you are seeking.