Mortgage Appointed Representative Oversight in 2026: What FCA Principal Firms Need to Evidence

A mortgage principal does not simply allow an Appointed Representative to use its regulatory permissions. It accepts responsibility for the regulated activities carried on by the AR within the scope of the appointment and must maintain systems, controls and resources capable of overseeing that activity on an ongoing basis.

The FCA's 2026 Mortgage Regulatory Priorities make AR oversight an explicit mortgage-sector focus. Principals are expected to review onboarding, monitoring, oversight and wind-down plans holistically and continuously, while also ensuring advice fees are set and monitored consistently and in line with Consumer Duty.

For mortgage networks, the practical standard is therefore wider than an annual AR questionnaire or a periodic file sample. The principal should be able to show why each AR was suitable to appoint, what activities it is permitted to conduct, how the level of oversight reflects risk and what happens when complaints, advice quality, growth or financial position deteriorate.

Onboarding should test whether the AR and the principal are both suitable for the relationship

SUP 12 requires principals to assess an AR before appointment. The due diligence should establish that the proposed AR is suitable, financially stable and capable of carrying on the business for which the principal will accept responsibility.

For a mortgage AR, the review should reflect the actual model. Relevant areas can include ownership, senior management, adviser competence, business plan, products, customer types, introducer relationships, financial position, complaints history, regulatory background, systems and expected volumes.

Previous principal relationships can also be relevant. A firm moving between networks may have open remediation, complaint trends or previous QA findings that deserve understanding before the new appointment is approved.

The principal must assess itself as well. SUP 12 requires the principal to maintain adequate skills and resources to oversee its ARs. A commercially attractive AR should not be appointed where the network lacks the people, systems or specialist knowledge necessary to supervise it effectively.

The approval record should explain why the AR was accepted and what monitoring conditions follow from the risk assessment. Due diligence is weaker where every AR receives the same standard onboarding regardless of size, customer population or advice complexity.

Scope should be precise enough to detect activity outside the appointment

The written AR agreement should identify the business the AR is permitted to conduct. In mortgage networks, this can include the relevant mortgage and home finance activities, products, advice permissions and any restrictions imposed by the principal.

The operational framework should make that scope visible. Advisers should know what they can and cannot do, while the principal's systems should identify where an AR expands into new products, introducer channels or regulated activity without prior review.

Scope creep can happen gradually. An AR may begin serving a different customer population, introduce second charge advice, increase later-life business or adopt a new fee model. Each change can alter the risk and may require the principal to review whether its controls, resources and contractual scope remain adequate.

SUP 12 and the FCA's current AR guidance also require notifications when relevant AR information changes. The compliance framework should therefore connect commercial change with regulatory reporting rather than rely on the AR to recognise the notification requirement itself.

A principal should be able to show that the written appointment, FCA information and live business all describe the same activity.

Ongoing oversight should be risk based and capable of intensifying

The FCA expects principals to oversee ARs on an ongoing basis and apply an appropriate level of monitoring. The intensity should reflect the risk presented by the AR rather than one fixed network standard.

For mortgage ARs, relevant risk indicators can include advice volumes, customer profile, second charge or later-life business, complaints, vulnerable customers, adviser turnover, file review results, fees, introducer relationships, financial position and previous remediation.

The risk rating should have consequences. A higher-risk AR may justify more frequent file review, deeper management meetings, enhanced financial monitoring or targeted thematic testing. A lower-risk AR with stable outcomes may support a lighter approach.

Risk should also be dynamic. Significant growth, complaints, management change, a new product line or deterioration in QA should trigger reassessment rather than wait for the annual review.

The FCA's mortgage priorities specifically call for holistic ongoing oversight. A framework that produces the same monitoring plan for every AR regardless of evidence is unlikely to demonstrate that standard convincingly.

Mortgage advice QA should be visible at AR level

Advice quality is one of the FCA's three headline mortgage priorities for 2026. A principal therefore needs enough evidence to understand whether customers advised by each AR receive suitable recommendations and good outcomes.

Network-wide QA averages can hide local weakness. An overall pass rate may look strong while one AR has repeated suitability findings, weak debt consolidation advice or poor record keeping. The principal should be capable of identifying that difference.

The file review methodology should assess the quality of advice rather than merely whether the AR submitted a complete case to the lender. The FCA's 2026 second charge work found that QA can be weakened where firms focus on documentation required for an offer rather than suitability and customer outcome.

Sampling should follow risk. Higher-risk advice types, vulnerable customers, complaints and advisers with previous findings may justify increased review. The principal should also consider whether different ARs require different levels of oversight depending on their business.

Where significant advice weaknesses are identified, the response should affect the AR risk assessment and monitoring plan. Repeated findings should not remain isolated within adviser feedback if they indicate a wider governance or competence problem.

Advice fees and fair value should be monitored across the network

The FCA's Mortgage Regulatory Priorities expressly tell principal firms to ensure advice fees are set and monitored consistently and in line with Consumer Duty. This makes AR fee governance a current supervisory issue.

The principal should understand what each AR charges retail customers, the basis on which fees vary and whether the network's fair value framework captures those differences. A firm-wide assessment can be misleading if ARs have substantial discretion over customer fees.

Variation is not automatically inappropriate. A complex specialist case may involve more work than a straightforward transaction. The network should nevertheless be able to explain why different fee structures remain consistent with the benefits customers receive.

The FCA's second charge work is relevant here because it found high intermediary fees and weaknesses in some fair value assessments. Mortgage principals should use that as a prompt to test whether their own fee oversight is sufficiently detailed.

Customer communications matter as well. The principal should understand how fees are presented, when the customer becomes liable and whether introducer or estate-agent arrangements create pressure or confusion.

Consumer Duty evidence should distinguish between ARs

Where the principal's retail business falls within Consumer Duty, the AR population should form part of outcomes monitoring. The principal is responsible for ensuring relevant standards are met for regulated activities carried on by ARs within the appointment.

The evidence should be capable of identifying differences between ARs. Advice QA, complaints, fees, customer surveys, support, vulnerability and journey data can each contribute depending on the business.

A network-wide average should not be allowed to conceal a poor-performing AR. If one AR generates materially more complaints or weaker file review outcomes, management should understand the cause and decide whether additional oversight is required.

The same applies to consumer understanding and support. A standard network script does not guarantee that all AR advisers communicate or support customers in the same way. File and call review can help test what happens in practice.

Consumer Duty should therefore influence AR risk assessment and remediation rather than sit in a separate annual board report.

Annual reviews should be substantive, not questionnaire exercises

The FCA requires principals to review each relevant AR at least once every 12 months, with different treatment for introducer appointed representatives. The review covers matters including the fitness and propriety of relevant senior management, the AR's financial position and the adequacy of the principal's own controls and resources.

This should bring together the evidence generated during the year. QA results, complaints, business growth, financial information, regulatory changes, scope, customer outcomes and previous remediation should inform the continuing suitability assessment.

An annual questionnaire completed by the AR can be useful, but it should not become the sole evidence source. The principal should verify material information where appropriate and challenge inconsistencies.

Significant issues should be escalated to the principal's governing body. The review should therefore reach a reasoned conclusion about whether the AR remains suitable and whether the principal remains capable of supervising it.

Additional reviews may be required when risk changes. The annual cycle is a minimum review point, not a reason to delay action where evidence indicates a significant problem.

The principal's annual self-assessment should challenge the whole framework

SUP 12 also requires the principal to prepare a written self-assessment of how it meets its responsibilities as principal, identify material deficiencies or concerns and have the document reviewed and approved by its governing body at least every 12 months.

This is not the same as the individual AR reviews. The self-assessment should examine the principal's overall framework, including whether resources remain adequate, whether monitoring identifies risk, whether the AR population is changing and whether significant issues are being escalated effectively.

For a mortgage network, the document should also reflect the FCA's current sector priorities. Advice quality, Consumer Duty, fees and holistic AR oversight are obvious areas for management challenge in 2026.

The strongest self-assessment is not one that concludes everything is satisfactory. It should identify genuine weaknesses where they exist and explain what the principal is doing about them.

The record must also be retained for the period required by the applicable rules and be available to the FCA if requested. It should therefore be treated as a substantive governance document rather than a compliance formality.

Financial promotions and introducer relationships need control

Mortgage ARs may generate business through websites, social media, estate agents, lead generators and other introducers. The principal should understand the communications and incentives associated with those channels where they fall within its regulatory responsibility.

The FCA's mortgage priorities identify conditional selling and incentives as an area of focus. Principals should therefore be alert to customer journeys in which an estate agent or other introducer creates the impression that a particular mortgage broker must be used.

The legal and regulatory position depends on the facts, and not every referral arrangement is prohibited. The principal should nevertheless understand whether communications are fair, clear and not misleading, whether customer choice is preserved and whether incentives create foreseeable harm.

AR oversight should therefore extend beyond advice files to the way customers enter the network. A suitable recommendation later in the journey does not necessarily cure a misleading or coercive acquisition process.

Where ARs create or amend financial promotions, the principal should maintain appropriate approval and monitoring controls rather than assume that a template approved once will remain accurate indefinitely.

Wind-down and termination are part of oversight

The FCA's Mortgage Regulatory Priorities expressly includes wind-down within the holistic AR lifecycle that principals should review. The relationship therefore needs an exit framework before problems arise.

Termination should address ongoing customer cases, complaints, records, financial promotions, access to systems, customer communications and regulatory notifications. Historic responsibility for regulated activity conducted during the appointment does not disappear because the commercial relationship has ended.

The principal should also consider what happens where an AR is financially distressed or unable to continue servicing customers. An orderly plan can reduce the risk that customers are left without support during a mortgage transaction or complaint.

Where termination follows regulatory weakness, open remediation and customer impact should be addressed explicitly. Closing the AR relationship is not a substitute for reviewing whether customers were harmed.

A mature oversight framework therefore covers onboarding, steady-state monitoring and exit as one continuous lifecycle.

Proposed AR reforms should not be confused with current rules

HM Treasury consulted in February 2026 on significant changes to the AR regime, including a proposed FCA permission for authorised firms wishing to act as principal. The consultation closed in April 2026.

As at August 2026, firms should not treat that proposed gateway as though it were already part of the current mortgage principal regime unless and until the relevant reforms are finalised and brought into force.

The proposal is still strategically relevant because it reinforces the direction of travel. The Government wants the FCA to have a specific mechanism to assess whether firms have the expertise, systems and resources necessary to act as principal.

Mortgage networks should therefore continue strengthening the same areas that current SUP 12 already requires: principal resources, risk-based oversight, governance, evidence and the ability to intervene when an AR creates harm.

How Regulatory Counsel can support

Regulatory Counsel supports mortgage principal firms and networks with AR due diligence, risk-rating frameworks, advice QA, Consumer Duty, fee oversight, annual AR reviews, governing-body self-assessments and remediation.

We can review an individual higher-risk AR, a sample of the network or the principal's overall SUP 12 framework.

Speak to Regulatory Counsel to discuss mortgage Appointed Representative oversight.