FCA Review of an Investment or Wealth Firm in 2026: How to Prepare and Respond

An FCA review of an investment adviser or wealth manager should be treated as an evidence exercise. The regulator may begin through ordinary supervision, a data-driven query, a sector review, complaints, a formal section 165 request or concerns identified through another part of the firm's regulatory relationship. Whatever the route, the firm needs one coherent account of how its controls work and what customer outcomes they produce.

The supervisory context is unusually clear in 2026. The FCA's Consumer Investments Regulatory Priorities focuses on building a stronger investment culture, strengthening trust, securing good consumer outcomes and strengthening financial crime controls. It also highlights AR oversight, operational resilience, financial resources and new technology. The FCA's August 2026 wealth management survey adds a current evidence base for discretionary wealth management and reinforces attention on governance, value, financial crime and service.

Preparation should therefore go beyond assembling policies. Supervisors are likely to be more interested in whether the firm's suitability files, fair value evidence, ongoing-service delivery, financial crime controls, AR data and management information support the statements senior management makes about the business.

Establish the scope and legal basis of the FCA request

The first step is to understand exactly what the FCA is asking and why. A broad request concerning Consumer Duty or suitability can contain separate questions about customer populations, policy, file evidence, data, governance and remediation.

The firm should break the request into individual deliverables and record the owner, source, reviewer, deadline and status for each. This response matrix helps prevent several teams answering the same issue differently.

The legal basis matters as well. Some information is requested through ordinary supervisory engagement, while section 165 of FSMA gives the FCA formal information-gathering powers. A formal notice should be handled according to its exact wording, definitions, time period and format.

If a request is genuinely unclear, the firm should seek clarification early rather than silently choose an interpretation that produces the wrong population. Principle 11 requires open and cooperative engagement, but cooperation depends on accuracy rather than guesswork.

Build one evidence set across advice, portfolio management and operations

Wealth businesses often hold relevant evidence across several systems. Advisers own client files, investment teams own portfolio decisions, operations own transfers and cash, finance owns fees and revenue, while compliance owns monitoring and complaints data.

The firm should identify the authoritative source for each question and reconcile information where systems overlap. A client count can differ between CRM and portfolio systems for legitimate reasons, but the firm should understand and document those reasons.

Historic versions should be preserved. If the FCA is reviewing a period before a policy, charging model or investment process changed, the firm should provide the version that actually operated at the time rather than only the improved current document.

Working papers should also be retained. If management later needs to explain how a fair value population or suitability sample was constructed, the methodology should be reproducible.

Consumer Duty evidence should identify where outcomes are weakest

The FCA may ask how the firm knows customers receive good outcomes. A governing-body report alone is unlikely to answer that question if the underlying data cannot be produced.

The firm should be ready to show evidence across products and services, price and value, consumer understanding and support. For wealth firms, that can include advice QA, portfolio service levels, fees, cash treatment, transfers, ongoing-service delivery, complaints and vulnerable client outcomes.

Segmentation is important. A firm-wide value conclusion may look positive while smaller portfolios pay a much higher effective price, or one advice channel may generate repeated suitability or service findings.

The FCA's current price and value material expects firms to understand costs and benefits rather than rely solely on market benchmarking. Where the firm has changed fees or cash practices in response to outcome evidence, the chronology and rationale should be clear.

The board should also understand limitations. If transfer-time data or vulnerable-client outcomes are weak, the firm should acknowledge the gap and show how it is being addressed rather than imply the missing evidence is positive.

Suitability files should withstand independent reconstruction

Suitability remains central for advisers and discretionary managers. The FCA can test whether client information, risk, capacity for loss, objectives and recommendation reasoning support the advice or portfolio service under the applicable COBS regime.

The firm should therefore perform its own risk-based sample before making broad statements that advice quality is strong. Higher-risk cases, complaints, replacement business, complex investments and advisers with previous findings can be particularly useful.

A file should allow another competent reviewer to understand why the recommendation was suitable without relying on the adviser's memory. Standard wording and complete forms provide limited assurance if the material judgement is absent.

Where internal review identifies a repeated weakness, management should assess root cause and whether a wider population may be affected. A supervisory response that acknowledges the issue and shows controlled remediation is more credible than an unsupported assertion that the QA framework is effective.

Ongoing advice should match the service clients paid for

The FCA's 2025 ongoing advice review means firms should expect questions about whether recurring advice fees correspond with actual service delivery. The customer agreement, workflow and management data should tell the same story.

The firm should be able to identify clients due a review, those who received the relevant service, those who did not engage and the fee or remediation treatment where the service was not delivered.

This should be distinguished from the detailed COBS periodic suitability requirements applying to particular services. The regulator may examine both, but they are different questions: did the firm comply with the applicable suitability rule, and did it deliver the service the customer contracted and paid for?

Where adviser capacity is a root cause, management should understand whether growth, acquisitions or client-bank allocation made the ongoing proposition operationally unrealistic.

Financial crime should reflect the firm's actual business model

The FCA's July 2026 findings for asset management and alternative firms provide a current supervisory benchmark. The regulator expects firms to understand the financial crime risks inherent in their own business models and to design controls capable of identifying, managing and mitigating those risks.

An FCA review may therefore examine the business-wide risk assessment, customer due diligence, enhanced due diligence, sanctions, transaction monitoring, suspicious activity escalation and governance. The depth will depend on the firm's products, clients and jurisdictions.

Private markets, complex ownership structures and cross-border customers can create different risks from mainstream retail portfolios. A generic AML risk assessment should not be assumed sufficient simply because it was approved by the board.

Where controls are outsourced, the firm should demonstrate oversight. A service provider's contract or assurance report does not remove the regulated firm's need to understand the risk and address material weaknesses.

Principal firms should be ready to produce AR-level evidence

The Consumer Investments Regulatory Priorities makes effective AR oversight an explicit expectation and highlights financial crime assessment as a current weakness in the market.

A principal should be ready to produce onboarding, scope, risk ratings, advice QA, complaints, financial promotions, Consumer Duty outcomes, financial crime assessments and annual review evidence for individual ARs rather than only one network policy.

The regulator may also compare AR data with returns and Financial Services Register information. Inactive or low-activity ARs should have a clear rationale and continuing oversight, particularly after the FCA's April 2026 findings.

Where the principal has identified a high-risk AR, the FCA is likely to be interested in what changed as a result. A high-risk label without enhanced monitoring, restriction or remediation provides little evidence that the methodology has practical effect.

CASS and prudential evidence should be ready where those regimes apply

Investment firms can have materially different prudential and client-asset obligations. The response should therefore identify which CASS and MIFIDPRU or IFPR requirements actually apply to the legal entity rather than provide generic industry material.

Where CASS applies, the FCA may examine reconciliations, client money or custody controls, breaches, governance and evidence that client assets remain protected. Significant operational or third-party dependencies should also be visible.

Where IFPR applies, the firm should be able to explain own funds, liquid assets, ICARA, wind-down and regulatory reporting in a way consistent with the current business and group structure.

A wealth firm's risk can also change through acquisition or consolidation. The FCA's 2025 consolidation review makes governance, debt, integration and financial resilience relevant where growth through acquisition forms part of the business model.

Data and management information should be explainable

The FCA is moving toward more targeted, data-led supervision. The 2026 Regulatory Priorities reports themselves state that the FCA wants less intensive attention on firms doing the right thing and stronger, faster action where harm is greatest.

Firms should therefore assume that outliers can generate questions. Unusual transfer times, complaint rates, AR growth, pricing, client cash, high-risk customer concentrations or advice outcomes can each become the starting point for supervisory engagement.

Management should know what the FCA can infer from the firm's data and whether the same issue has already been identified internally. A regulator should not be the first person to tell the board that one customer segment has materially weaker outcomes.

Definitions and lineage matter. If the firm cannot explain how a key metric was calculated or why two systems disagree, the data-quality issue can undermine confidence in the wider control framework.

Management interviews should test ownership, not rehearsed language

The FCA may meet Senior Managers, compliance, investment leaders, advisers or operations staff. These discussions test whether the people responsible for controls understand how they work and what current weaknesses exist.

Preparation should focus on facts, evidence and ownership rather than memorised scripts. A Senior Manager responsible for advice should know the material QA findings. A compliance leader should understand the monitoring risk assessment. A business head should know where fair value or service delivery is under challenge.

Different employees do not need to use identical words, but materially inconsistent explanations of who owns a control or how it operates can raise governance concerns.

Where a factual point is uncertain, it is better to verify and respond accurately than guess. The firm should track commitments made during meetings and treat them as formal actions.

Section 165, section 166 and requirements are escalation tools, not assumptions

A review can include a formal section 165 information request, and the FCA can use other tools where it needs greater assurance. Section 166 skilled person reviews and voluntary or own-initiative requirements are among the available supervisory mechanisms.

The firm should understand those tools without assuming that ordinary FCA contact will inevitably escalate. The right response is reliable evidence, open identification of weaknesses and remediation capable of addressing root cause.

If the FCA does require independent assurance, the scope and legal basis should be clear. Regulatory Counsel should not be described as an FCA-appointed skilled person unless formally appointed for that specific matter.

Where a requirement is imposed, the firm should translate the exact wording into operational controls immediately and manage remediation as a separate governed programme.

Remediation should begin when the evidence is clear

A firm should not leave a known control failure in place simply because the FCA has not completed its review. Where the weakness is clear, appropriate remediation can begin while historic evidence and chronology are preserved.

Material customer impact should be assessed separately from the control fix. If suitability, fees, ongoing services or another issue may have affected clients outside the sample, management should determine the potentially affected population and whether redress is required.

Principle 11 and SUP 15 may also create notification questions depending on significance. The fact that the FCA is already in contact does not automatically replace another applicable notification route.

Closure should require evidence that the new control works. Policy updates and training completion are actions, not proof that customer outcomes or operational performance have improved.

What should a wealth or investment firm have ready before FCA contact?

A well-prepared firm should have a current regulatory risk assessment, reliable compliance monitoring, defensible suitability evidence, Consumer Duty outcome data, current financial crime risk assessments, AR oversight where applicable and controlled regulatory reporting.

Senior management should also have read the 2026 Consumer Investments Regulatory Priorities and considered which expectations are most relevant to the firm's model. Discretionary wealth managers should understand the current wealth management survey findings and how their own evidence compares with the issues the FCA is highlighting.

The objective is not to maintain a permanent data room for every possible question. It is to operate the firm with enough evidence that management can respond accurately without rebuilding the compliance framework under a supervisory deadline.

How Regulatory Counsel can support

Regulatory Counsel supports investment advisers, wealth managers, platforms and principal firms with FCA supervisory reviews, section 165 responses, suitability and Consumer Duty evidence, financial crime, AR oversight, management preparation and remediation.

We can support a live FCA request or undertake an independent readiness review before supervisory engagement.

Supervisory engagement is supported through our FCA supervision and remediation service, drawing on the same evidence base we build for investment and wealth firms during readiness reviews.

Speak to Regulatory Counsel to discuss FCA review support for an investment or wealth firm.