UK Small Payment Institution Licence (SPI Licence)
Expert advisory on UK Small Payment Institution (SPI) registration with the FCA. Lower-cost entry to regulated payment services.
Get Expert Advice
Whether you need licensing support, compliance advice or regulatory strategy, our team is ready to help. Free initial consultation — no obligation.
Get Expert Advice
What is the UK Small Payment Institution Licence?
The UK Small Payment Institution (SPI) registration is a lower-cost entry point to regulated payment services in the United Kingdom. Unlike full Authorised Payment Institution (API) authorisation, SPI registration is available to firms whose average monthly payment transaction volume does not exceed €3 million.
SPI registration is governed by the Payment Services Regulations 2017 and administered by the Financial Conduct Authority. It is a registration — not full authorisation — meaning it carries certain limitations: SPIs cannot passport into EEA member states and cannot appoint agents in other EEA countries.
SPIs are subject to the same AML obligations as APIs, including full compliance with the Money Laundering Regulations 2017 and FCA supervisory reporting. However, unlike APIs, SPIs are not legally required to safeguard client funds under Regulation 23 of the PSRs 2017 — although they may voluntarily opt in to safeguarding requirements, including under PS25/12. The SPI route should be viewed as a stepping stone to full API authorisation, not a permanent lower-compliance regime.
Who Needs UK Small Payment Institution Licence?
SPI registration is appropriate for firms at an early stage of their payment services business or with inherently lower transaction volumes.
- —Early-stage fintech firms launching a payment services product with limited initial volumes
- —Niche payment service providers serving specialist markets with naturally low volumes
- —Firms testing a payment services business model before committing to full API authorisation
- —Money remittance startups with initial monthly volumes below €3 million
- —Payment facilitators in early growth phase
A common misconception is that SPI registration involves no compliance obligations. While SPIs benefit from lighter capital requirements and are not legally required to safeguard client funds under Regulation 23 of the PSRs 2017, the ongoing AML and reporting obligations are identical to those for APIs. SPIs may voluntarily opt in to safeguarding, and the FCA strongly encourages this as best practice. Firms that treat SPI as a no-compliance option face immediate supervisory scrutiny from the FCA.
Key Requirements
Initial Capital
No minimum initial capital requirement for SPI registration. However, the FCA expects firms to demonstrate adequate financial resources on an ongoing basis — firms must be able to meet their liabilities as they fall due and maintain sufficient resources to wind down in an orderly manner if required.
Governance & Fit and Proper
All directors and qualifying shareholders (10%+) must complete FCA Individual Questionnaires and pass the fit and proper assessment. The MLRO must be appointed and in place at registration. The FCA assesses the competence and integrity of all key persons.
AML & Financial Crime Controls
The Money Laundering Regulations 2017 apply in full to SPIs — identical obligations to fully authorised payment institutions. This requires a UK-based MLRO (SMF17), business-wide risk assessment, CDD procedures, ongoing monitoring and SAR reporting framework.
Safeguarding (Voluntary)
SPIs are not legally required to safeguard client funds under Regulation 23 of the PSRs 2017. However, the FCA strongly encourages SPIs to safeguard voluntarily as a matter of best practice, and SPIs may opt in to the PS25/12 safeguarding regime. Firms that choose to safeguard must segregate client funds in a designated account at an FCA-approved credit institution with written acknowledgement. Opting in provides greater consumer protection and strengthens the firm's position when upgrading to API authorisation.
Operational Requirements
Adequate IT systems, business continuity arrangements and complaints handling procedures must be in place. Outsourcing arrangements must be appropriately governed.
Volume Threshold Monitoring
The FCA monitors average monthly payment transaction volumes via RMAR data. If an SPI exceeds or expects to exceed the €3 million threshold, it must apply to upgrade to API authorisation before breaching the limit. Operating above the threshold without API authorisation is a regulatory breach.
The Application Process
Business Model Scoping and Permission Mapping
Regulatory Counsel confirms that your payment services fall within PSR 2017 Schedule 1 and that projected monthly volumes will remain below €3 million for the foreseeable future. We map your business model to the correct SPI registration categories. Timeline: 1 week.
Corporate Structure and Key Person Preparation
We identify all qualifying shareholders (10%+) and directors for Individual Questionnaires. MLRO appointment is confirmed. We prepare all fitness and propriety disclosure packages. Timeline: 2–3 weeks.
AML Programme and Compliance Framework
We build a fully MLR-compliant AML programme tailored to your business model. For firms that wish to voluntarily safeguard client funds (strongly recommended), we establish compliant safeguarding arrangements including a segregated account at an approved credit institution with written acknowledgement. Timeline: 2–3 weeks.
Application Documentation
We prepare the regulatory business plan, financial projections and full policy suite. The business plan includes a clear volume forecast with an explicit API upgrade trigger plan. Timeline: 1–2 weeks.
FCA Connect Submission
The completed application is submitted via FCA Connect. FCA checks completeness within 5 working days. Regulatory Counsel conducts final quality assurance before submission. Timeline: 1 week.
FCA Assessment
The FCA reviews the AML programme quality, key person fitness and propriety and overall regulatory readiness. Regulatory Counsel manages all information requests and correspondence. Timeline: 3–6 months.
Total expected timeline: 3–5 months from instruction to registration.
Why Applications Fail — and How We Prevent It
Applying as SPI When Volumes Exceed €3m
The most fundamental error — applying for SPI registration when projected transaction volumes already exceed or will imminently exceed €3 million per month. The FCA will reject the registration and require a full API application, wasting 3–6 months of preparation time and fees.
Treating SPI as a No-Compliance Regime
Ongoing AML and reporting obligations are identical to fully authorised payment institutions. While safeguarding is not legally required for SPIs, the FCA expects robust consumer protection. Firms that approach SPI registration with an assumption of no compliance face immediate supervisory issues post-registration.
No Plan to Upgrade to API
Firms that reach the €3 million monthly threshold without having started API preparation face a compliance gap that can last 6–12 months while the API application is processed. Regulatory Counsel builds an explicit upgrade trigger into every SPI application to prevent this scenario.
No Plan for Client Fund Protection
Although safeguarding is not legally required for SPIs, the FCA strongly encourages it. Firms that hold client funds without any safeguarding arrangements face supervisory scrutiny and are poorly positioned for API upgrade. Establishing safeguarding voluntarily from the outset demonstrates robust governance.
How Regulatory Counsel Can Help
End-to-End Application Management
We manage the complete SPI registration process from scoping through to FCA registration, including business plan, AML programme and all FCA correspondence.
Regulatory Business Plan
We draft a credible regulatory business plan with realistic volume projections and a clear API upgrade pathway — positioning the SPI registration as a strategic stepping stone.
Ongoing Compliance Support
Post-registration compliance support including RMAR reporting, volume monitoring, AML programme reviews and API upgrade preparation when volumes approach the threshold.
Regulatory Counsel advises early-stage and growth-phase payment firms across the UK and globally. We understand that SPI registration is typically the first step in a longer regulatory journey, and we structure our advisory to support that trajectory — from initial registration through to full API authorisation.
Frequently Asked Questions
€3 million per month, calculated as a 12-month rolling average. Firms exceeding or projected to exceed this threshold must apply to upgrade to an Authorised Payment Institution before breaching the limit.
No — safeguarding is not a legal requirement for SPIs under Regulation 23 of the PSRs 2017. PS25/12 also explicitly confirms that SPIs may opt in to safeguarding voluntarily but are not obliged to do so. However, the FCA strongly encourages voluntary safeguarding as best practice, and firms planning to upgrade to API authorisation should implement safeguarding from the outset to demonstrate regulatory readiness.
No. EEA passporting is not available to SPIs — it is available only to Authorised Payment Institutions. Firms requiring cross-border EU payment services access must obtain API authorisation.
The firm must notify the FCA and begin the API application process immediately. Operating above the SPI threshold without API authorisation is a regulatory breach. Regulatory Counsel advises firms approaching the threshold to begin their API application at least 12 months in advance.
Application preparation takes 3–4 weeks with Regulatory Counsel. FCA registration takes 3–6 months from submission of a complete application. The main variables are application completeness and business model complexity.