Payment Institutions

Navigating Capital Adequacy for UK Payment Institutions

Regulatory Counsel · March 2026 · 15 min read

Key Takeaways

  • UK Payment Institutions must comply with initial and ongoing capital requirements as set out in the Payment Services Regulations 2017 (PSRs 2017).
  • Initial capital varies depending on the payment services offered, ranging from €20,000 to €125,000.
  • Ongoing capital is calculated using Method A, B, or C, with Method A (fixed overheads) being the most common.
  • Safeguarding of relevant funds is a crucial obligation, separate from capital adequacy, designed to protect client money.
  • Robust internal controls, risk management, and regular reporting to the FCA are essential for continuous compliance.

What are the Capital Adequacy Requirements for UK Payment Institutions? UK Payment Institutions are subject to stringent capital adequacy requirements designed to ensure their financial resilience and protect consumers, primarily governed by the **Payment Services Regulations 2017 (PSRs 2017)**. These regulations, which implemented the second Payment Services Directive (PSD2) into UK law, mandate both initial capital at the point of authorisation and ongoing capital to be maintained throughout an institution’s operational life. The overarching objective is to provide a financial buffer against inherent operational and credit risks, thereby safeguarding the stability of the payment ecosystem and, most importantly, client funds. Failure to adhere to these requirements can lead to significant regulatory intervention, including fines, restrictions on services, or even the withdrawal of authorisation. It is, therefore, imperative for any existing or aspiring Payment Institution to have a comprehensive understanding of, and robust framework for, capital management.

The FCA’s approach to capital adequacy is pragmatic, differentiating between various types of Payment Institutions based on the scope of their services. This nuanced approach acknowledges that the risk profiles of institutions offering, for example, only money remittance will differ significantly from those providing account information services or payment initiation services alongside other payment services. The PSRs 2017 also make a clear distinction between Payment Institutions (PIs) and Small Payment Institutions (SPIs), with the latter benefiting from a lighter touch regime regarding initial capital and, in some cases, ongoing capital requirements, provided they meet specific turnover thresholds. However, even SPIs are not entirely exempt from capital considerations, and must demonstrate sufficient financial resources to operate safely.

What is the Initial Capital Required for UK Payment Institutions? The initial capital required for UK Payment Institutions varies depending on the specific payment services they intend to provide, as precisely stipulated in **Regulation 6 of the PSRs 2017**. This initial capital must be fully paid up at the time of authorisation, demonstrating the firm’s foundational financial strength. The figures are distinct and are directly derived from the services offered:

  • €20,000 for a payment institution that only provides payment initiation services (service 7 under Schedule 1 Part 1 of the PSRs 2017).
  • €50,000 for a payment institution that only provides money remittance (service 6 under Schedule 1 Part 1 of the PSRs 2017).
  • €125,000 for a payment institution that provides any other payment services (services 1-5 and 8 under Schedule 1 Part 1 of the PSRs 2017), or a combination of services including those listed above. This is the most common initial capital requirement for many full-scope PIs.

It is crucial to understand that these are minimum thresholds. The FCA reserves the right to require higher initial capital where a firm’s business model or risk assessment indicates a greater need for financial resilience. This discretionary power underscores the FCA’s commitment to proportional regulation. Applicants for authorisation must also demonstrate that they have robust internal capital adequacy assessment processes (ICAAP) that consider all material risks. This goes beyond mere compliance with the minimums; it is about demonstrating a comprehensive understanding of the firm’s risk landscape and having adequate resources to mitigate those risks. For more on the authorisation process, see our insights on FCA Authorisation for Payment Institutions.

How is Ongoing Capital Calculated for UK Payment Institutions? Ongoing capital for Payment Institutions in the UK is primarily calculated using one of three methods – Method A, Method B, or Method C – as outlined in **Regulation 8 of the PSRs 2017**. The choice of method typically depends on the nature and volume of the Payment Institution’s operations, with Method A being the most widely applicable and frequently used.

  • Method A: Fixed Overheads (Most Common)
  • Method B: Payment Volume-Based
  • Method C: Exposure to Risk-Weighted Assets (Less Common)

Regardless of the method chosen, Regulation 9 of the PSRs 2017 mandates that the amount of own funds must never fall below the initial capital requirements. This means if a firm’s ongoing capital calculation results in a figure lower than its initial capital, it must still hold at least the initial capital amount. Firms must regularly monitor their capital position and proactively address any deficits. This includes developing robust forecasts and stress testing scenarios to ensure future compliance.

What is the Role of Safeguarding in Protecting Customer Funds? Safeguarding is a critical regulatory obligation for UK Payment Institutions, distinct from, yet complementary to, capital adequacy, and is enshrined in **Regulation 23 of the PSRs 2017**. It focuses specifically on the protection of **’relevant funds’**, which are monies received from payment service users for the execution of payment transactions or received from a payment service provider for the execution of payment transactions. The primary objective of safeguarding is to ensure that these customer funds are protected in the event of the Payment Institution’s insolvency. Unlike capital adequacy, which provides a buffer against general business risks, safeguarding is about segregating and protecting customer money from the firm’s own operating funds.

Payment Institutions must employ one of two primary safeguarding methods:

  • Segregation in a separate account: The most common method involves depositing relevant funds into a separate account at an authorised credit institution or the Bank of England. This account must be clearly designated as a client money or safeguarding account, distinct from any accounts holding the firm’s own funds. The funds held in this account must be ring-fenced to prevent them from being used to satisfy claims from other creditors in the event of the PI’s insolvency. This method ensures all customer funds are segregated at all times, providing a high level of protection.
  • Insurance or comparable guarantee: A less common method is to cover relevant funds by an insurance policy or comparable guarantee from an insurance company or credit institution. This policy must specifically cover the outstanding amount of customer funds in the event of insolvency. However, the FCA generally views specific trust accounts as providing more robust and direct protection than insurance, and typically prefers the segregation method. Firms opting for this method must demonstrate its equivalence in protecting client funds.

In addition to these core methods, Regulation 23(6) stipulates that any funds received from payment service users before the payment transaction is executed, and funds received from a payer via another payment service provider, must be safeguarded. Firms must also perform regular reconciliations of safeguarding accounts and maintain meticulous records to demonstrate compliance. The FCA places significant emphasis on the effectiveness of safeguarding arrangements, viewing any failure in this area as a serious breach. For a deeper dive into these requirements, see Safeguarding Funds for UK PIs.

What are the Ongoing Compliance and Reporting Obligations? Maintaining compliance with capital adequacy and safeguarding requirements is an ongoing obligation for UK Payment Institutions, requiring robust internal controls, diligent monitoring, and regular reporting to the Financial Conduct Authority (FCA). **Regulation 102 of the PSRs 2017** grants the FCA extensive powers to supervise and enforce these requirements, highlighting the serious nature of non-compliance.

Key ongoing compliance activities include:

  • Regular Capital Monitoring: Firms must continuously monitor their capital position against the calculated requirements. This involves monthly or quarterly internal reporting, forecasting future capital needs, and conducting stress tests to assess the impact of adverse scenarios. Any projected or actual breach of capital requirements must be reported to the FCA immediately.
  • Annual Financial Statements and Audit: PIs are required to submit their annual audited financial statements to the FCA. The auditors play a critical role in verifying the accuracy of the financial information, including the fixed overheads used in Method A calculations, and assessing the effectiveness of internal controls related to capital management.
  • FCA Reporting: Payment Institutions must submit regular regulatory reports to the FCA via its Gabriel system or the newer RegData platform. These reports include financial returns, which detail capital calculations, balance sheet information, and profit and loss accounts. The precise reporting frequency and content depend on the firm’s authorisation status and business model. Accuracy and timeliness in these submissions are paramount.
  • Internal Controls and Governance: Effective governance arrangements are crucial. This includes having a clearly defined board or management committee responsible for overseeing capital adequacy, a robust risk management framework, and comprehensive policies and procedures for identifying, measuring, monitoring, and controlling capital risks. Staff involved in financial operations must be adequately trained and competent.
  • Safeguarding Compliance: Ongoing compliance with safeguarding requirements includes daily reconciliation of client money accounts, ensuring timely segregation of relevant funds, and maintaining clear internal procedures for handling client money. Firms must also appoint an individual responsible for overseeing safeguarding compliance and report any significant safeguarding breaches to the FCA without delay.
  • Senior Manager and Certification Regime (SMCR): Relevant individuals within a Payment Institution are accountable under the SMCR for their actions and omissions. This includes senior managers responsible for finance, risk, and operations, who bear personal responsibility for ensuring the firm meets its capital and safeguarding obligations. This regime significantly increases individual accountability for regulatory compliance.

Proactive engagement with regulatory guidance and maintaining an open dialogue with the FCA supervisors can significantly aid in navigating these complex requirements. Firms should also invest in appropriate technology solutions to automate reporting and monitoring where possible, reducing the risk of manual errors and improving efficiency. For a broader view of FCA compliance, explore our FCA Compliance Consulting services.

What are the Consequences of Non-Compliance? Non-compliance with capital adequacy and safeguarding requirements for UK Payment Institutions can lead to severe regulatory consequences, underscoring the critical importance of robust internal controls and proactive risk management. The FCA possesses a wide range of enforcement powers under the **PSRs 2017** and the Financial Services and Markets Act 2000 (FSMA) to address breaches.

Potential consequences include:

  • Fines and Penalties: The FCA can impose substantial financial penalties on firms and individuals found to be in breach of regulations. These fines can be significant, reflecting the gravity of the contravention and its potential impact on consumers and market integrity. For example, a firm failing to safeguard client funds appropriately could face a fine that far exceeds the amount of funds at risk.
  • Restrictions on Operations: The FCA can restrict a Payment Institution’s ability to conduct certain activities, including prohibiting the onboarding of new clients, launching new products, or even suspending specific payment services. Such restrictions can severely impact a firm’s business model and revenue stream.
  • Withdrawal of Authorisation: In the most severe cases of persistent or egregious non-compliance, particularly concerning safeguarding failures or major capital shortfalls, the FCA has the power to withdraw a firm’s authorisation. This effectively forces the firm to cease all regulated activities, leading to business closure.
  • Public Censure and Reputational Damage: The FCA frequently publishes details of its enforcement actions, including the names of firms and individuals involved. A public censure can cause irreparable damage to a firm’s reputation, eroding client trust and impacting future business prospects within the highly competitive payments sector.
  • Individual Accountability: Under the Senior Managers and Certification Regime (SMCR), individuals holding senior management functions can be held personally accountable for breaches that fall within their areas of responsibility. This can lead to personal fines, bans from holding regulated positions, and significant reputational damage for the individuals involved. The FCA expects senior managers to take all reasonable steps to prevent regulatory breaches.
  • Increased Supervisory Scrutiny: Firms that have demonstrated compliance issues often face heightened supervisory scrutiny from the FCA, involving more frequent reporting, extensive data requests, and potentially on-site visits. This increased oversight diverts resources and can be a significant operational burden.
  • Impact on Funding and Banking Relationships: Non-compliance can make it difficult for Payment Institutions to attract investors or obtain banking services. Credit institutions are increasingly wary of serving firms with poor regulatory standing, reflecting the broader de-risking trend in financial services.

It is therefore vital that Payment Institutions view compliance not merely as a tick-box exercise, but as an integral part of their operational and risk management framework. Proactive self-assessment, robust internal audit functions, and keeping abreast of regulatory developments are crucial for mitigating these risks. Engaging with expert compliance consultants can provide invaluable support in navigating this complex regulatory landscape and ensuring continuous adherence to all requirements. Learn more about navigating regulatory challenges by exploring our Regulatory Compliance Consulting offerings.

Need Expert Advice?

Free initial consultation. No obligation.

Speak to an Expert