An FCA review of a mortgage firm should be treated as an evidence exercise. The regulator may begin through ordinary supervision, a data-driven question, a multi-firm review, a request under its formal information-gathering powers or concerns arising from complaints, regulatory returns or other intelligence. Whatever the route, the quality of the response depends on whether the firm's documents, data and management explanations tell the same story.
Mortgage firms have a particularly clear supervisory agenda in 2026. The FCA's Mortgage Regulatory Priorities focus on responsible lending, support for borrowers in financial difficulty and quality of advice, alongside Appointed Representative oversight, incentives and conflicts, fraud, resilience and other cross-cutting issues. The regulator has also published detailed second charge findings and is progressing the Mortgage Rule Review and later-life market study.
A firm should therefore prepare to demonstrate what happens to customers in practice. Policies remain relevant, but supervisors are likely to ask how the firm knows its advice is suitable, affordability assumptions remain realistic, ARs are controlled and Consumer Duty outcomes are acceptable.
Establish the scope and legal basis of the FCA request
The first step is to understand exactly what the FCA is asking and why. A supervisory email requesting "information on affordability" can contain several separate questions about policy, model assumptions, customer data, governance and outcomes. The firm should break the request into individual deliverables rather than allow different teams to answer the same issue inconsistently.
A response matrix is useful. Each question should have an owner, evidence source, reviewer, due date and status. This creates control over the submission and identifies where the firm does not currently hold the requested information.
The legal basis also matters. Some FCA requests arise through normal supervisory engagement, while section 165 of the Financial Services and Markets Act 2000 gives the regulator formal powers to require information and documents. The response process should recognise the status of the request without becoming unnecessarily adversarial.
If the deadline creates a genuine accuracy problem, the firm should engage early rather than submit unreliable data. Principle 11 requires open and cooperative dealing with the regulator. A reasoned request for clarification or additional time is generally stronger than silence followed by a rushed submission.
Build one evidence set across compliance, business and data
Mortgage reviews often cut across several functions. Compliance may own the policy, the credit team may own affordability, advisers may own customer files and finance or data teams may own the regulatory information. Without central control, those sources can produce conflicting answers.
The firm should identify the approved document set relevant to the review period and preserve historic versions where the process has changed. A policy updated last month should not be presented as though it governed customer journeys two years earlier.
Data needs similar version control. If the FCA asks for advice QA, complaints, affordability outcomes or AR data, the firm should define the population, period, exclusions and calculation method. Material limitations should be disclosed.
The working papers behind the submission should be retained. If supervisors ask how a number was produced, the firm should be able to recreate it from the same sources rather than rebuild the analysis from memory.
This is particularly important where information has passed through several spreadsheets or manual adjustments. Explainability is part of credibility.
Advice files should show suitability, not only lender acceptance
Advice quality is a headline mortgage priority in 2026. Firms should expect the FCA to examine whether recommendations are genuinely suitable and whether QA is strong enough to detect poor advice.
The file should show the customer's needs and circumstances, material alternatives and the reasoning behind the recommendation. In debt consolidation or later-life cases, the evidence should be correspondingly deeper where the risks are greater.
The FCA's second charge work found that some firms appeared to focus on eligibility and lender acceptance rather than suitability. A mortgage broker should therefore avoid using completion or offer rates as evidence that advice quality is good.
Before responding to the FCA, the firm should test a representative and risk-based sample of files using the same standard it expects to describe. If the internal review identifies weak records or advice reasoning, management should understand the extent and begin appropriate remediation.
The response should be accurate about what the firm found. Claiming that the QA framework is effective when the firm's own sample immediately shows repeated suitability gaps creates unnecessary supervisory risk.
Lenders should be ready to explain affordability assumptions
For mortgage lenders, affordability is likely to attract detailed questions. The FCA's current priorities expect firms to monitor and oversee assessments so that they remain appropriate, while its 2026 second charge findings specifically challenge unrealistic expenditure assumptions.
The firm should be ready to explain its income methodology, expenditure assumptions, stress testing, model governance and override process. Supervisors may be interested in how assumptions were validated and what outcome evidence shows after customers enter the mortgage.
Model documentation should match the live system. A written policy that describes one stress methodology while the production engine uses another is an obvious weakness.
The lender should also understand exceptions. Where the current rules permit a modified or exempt route, the file and system should identify why that route applied. Staff should not need to reconstruct the rationale only after the FCA asks.
Outcome evidence can be important. Early arrears, forbearance, complaints and segment-level performance can help demonstrate whether the original affordability methodology continues to work.
AR and network oversight should be demonstrable at individual AR level
Mortgage principal firms are expected to review AR onboarding, monitoring, oversight and wind-down holistically and on an ongoing basis. An FCA review may therefore look beyond network policy and ask what happened with particular ARs.
The principal should be able to show how each AR was risk-rated, which monitoring was performed, how advice QA and complaints influenced the risk assessment and what happened when standards deteriorated.
Annual AR reviews and the governing-body self-assessment under SUP 12 should use actual evidence. Generic wording repeated across every AR can raise questions about whether the process is substantive.
Fee governance is another current issue. The FCA expects mortgage principals to ensure advice fees are set and monitored consistently and in line with Consumer Duty. The principal should therefore understand material fee variation across the AR population rather than rely on one network-level fair value statement.
Where an AR has been terminated or restricted, the firm should also retain evidence of customer impact, remediation and regulatory notifications.
Consumer Duty evidence should identify weaker outcomes
A Consumer Duty board report is unlikely to be enough on its own. The FCA can ask how the firm knows customers receive good outcomes, which measures are used and what action management took when results were poor.
Mortgage firms should therefore prepare evidence across advice, fees, consumer understanding, support, vulnerability and complaints. The right dataset depends on the business model.
Segmentation matters. A firm-wide average can hide poorer outcomes for one adviser, product, customer group or AR. The firm's MI should be capable of identifying meaningful differences where the risk warrants it.
The FCA's July 2026 outcomes-monitoring publication reinforces the need for interpretation. Firms should be able to explain why a metric is relevant, what standard is expected and what happens when the result falls outside tolerance.
Where evidence is weak, that limitation should be visible. A firm can remediate incomplete MI more credibly than it can defend an unsupported conclusion that all outcomes are good.
Meetings and interviews should test knowledge, not scripts
The FCA may want to meet senior managers, compliance staff, credit leaders or advisers. These meetings allow the regulator to test whether the written framework is understood by the people responsible for it.
Preparation should therefore focus on the evidence and known issues rather than rehearsed messaging. A senior manager responsible for mortgage advice should understand the QA findings and material risks. A credit leader should be able to explain the affordability model and override governance.
Consistency matters, but employees do not need to use identical language. The concern arises where different teams reveal materially different understandings of who owns a control or how the process works.
If a factual point is uncertain, it is generally better to verify and provide the answer afterwards than guess. Overconfident inaccuracies can create follow-up questions that would otherwise have been unnecessary.
The firm should keep a record of commitments made during meetings and track them as formal actions.
Remediation should not wait for the review to end
Where the firm identifies a clear weakness during preparation, it should not normally leave the control ineffective merely because the FCA has not completed its review. Remediation can begin while the supervisory process is ongoing.
The historic position should still be preserved. A policy or system changed after the FCA request should be described accurately rather than presented as though it applied throughout the review period.
Material customer impact needs separate consideration. If internal testing identifies unsuitable advice, affordability problems or misleading referral conduct, management should assess whether customers outside the sample may also have been affected.
Principle 11 and SUP 15 may also require consideration where a significant matter comes to light. The existence of an FCA review does not replace the firm's ordinary notification obligations.
A remediation plan should therefore identify root cause, affected population, owner, action and evidence required for closure. The FCA is likely to be more interested in whether the firm understands and controls the issue than in a superficial promise that the policy will be updated.
Understand the FCA's escalation tools without assuming they will be used
Most FCA supervisory reviews do not automatically become enforcement investigations. Firms should avoid treating every request as evidence that formal action is inevitable.
The regulator nevertheless has a range of tools if it requires further assurance. Section 166 allows the FCA to require or commission a skilled person review in appropriate circumstances, while requirements or restrictions can also be used where the FCA considers them necessary.
The right preparation is not defensive positioning. It is credible evidence, honest identification of weaknesses and timely remediation.
Regulatory Counsel should never be described as an FCA-appointed skilled person unless formally appointed for that specific matter.
What should a mortgage firm have ready before FCA contact?
A well-prepared firm should already have a current regulatory risk assessment, tested compliance monitoring, reliable advice or lending MI, Consumer Duty evidence, clear AR oversight where applicable and a record of material remediation.
Management should also have reviewed the current Mortgage Regulatory Priorities against the firm's business model. That makes it easier to understand why the FCA may be asking a question and which evidence will be most relevant.
The objective is not to create a permanent virtual data room for every possible request. It is to maintain records and governance strong enough that the firm can respond accurately without rebuilding its compliance framework under deadline pressure.
How Regulatory Counsel can support
Regulatory Counsel supports mortgage lenders, brokers and networks with FCA supervisory reviews, section 165 responses, evidence assessment, management preparation, Consumer Duty, remediation and regulatory correspondence.
We can support a live FCA request or undertake a readiness review before supervisory engagement.
Speak to Regulatory Counsel to discuss FCA review support for a mortgage firm.
Frequently Asked Questions
The FCA can engage through ordinary supervision, sector work, regulatory data, complaints, thematic reviews or concerns about a particular control or customer outcome. A review does not automatically mean enforcement action.
Yes. The FCA has formal information-gathering powers under FSMA, including section 165, in addition to ordinary supervisory engagement.
The Mortgage Regulatory Priorities identify responsible lending, borrowers in financial difficulty and advice quality as headline priorities, with additional focus including AR oversight, conflicts, fraud and resilience.
Where a clear weakness has been identified, firms should not normally delay appropriate remediation solely because the FCA review is ongoing. Historic evidence and timing should be preserved accurately.
Yes. We can help scope the request, organise evidence, review regulatory issues, prepare management and support remediation and correspondence.