FCA Authorisation — Step-by-Step Guide to the Application Process

Understanding the FCA Authorisation Framework

Any firm wishing to carry on regulated financial services activities in the United Kingdom must obtain authorisation from the Financial Conduct Authority under Part 4A of the Financial Services and Markets Act 2000 (FSMA). Operating without authorisation — or exceeding the scope of your permissions — is a criminal offence under section 23 of FSMA, punishable by up to two years' imprisonment and an unlimited fine.

This guide provides a detailed walkthrough of the authorisation process, from initial planning through to the FCA's determination and your obligations as a newly authorised firm.

Phase 1: Pre-Application Planning

Regulatory perimeter analysis: The first step is determining whether your business model requires FCA authorisation and, if so, which specific regulated activities and permissions you need. The FCA's regulatory perimeter is defined by the Regulated Activities Order (RAO) 2001, which lists over 60 regulated activities across categories including: - Accepting deposits - Issuing electronic money - Payment services - Consumer credit - Investment services (dealing, arranging, managing, advising) - Insurance mediation - Mortgage lending and broking

Errors at this stage are costly. Applying for the wrong permissions delays the process; failing to apply for all necessary permissions may require a costly variation of permission application later.

Pre-application engagement with the FCA: The FCA offers pre-application meetings for firms planning to apply for authorisation. These meetings allow you to: - Discuss your business model and the permissions you believe are required - Understand the FCA's expectations for your specific application - Identify potential issues early — before they become grounds for refusal - Receive guidance on the documentation and evidence the FCA will expect

Pre-application meetings are not mandatory but are strongly recommended, particularly for novel business models, complex group structures or applications involving multiple regulated activities.

Assembling your application team: Preparing an FCA application is a substantial project requiring input from: - Senior management (business plan, strategy, governance design) - Legal advisers (regulatory perimeter analysis, document drafting) - Compliance professionals (compliance framework design, policy drafting) - Finance (financial projections, capital adequacy calculations) - HR (SMF holder identification, fit-and-proper documentation)

Phase 2: Application Documentation

The FCA application pack typically includes:

Regulatory business plan: A comprehensive document setting out your business model, target market, product range, distribution channels, pricing strategy, revenue projections and growth plans. The business plan must demonstrate commercial viability and explain how the business model serves customer interests. The FCA will scrutinise any features that create risks of consumer harm — such as complex fee structures, high-risk products or aggressive growth targets.

Financial projections: Three-year (minimum) financial projections demonstrating the firm can meet its regulatory capital requirements, remain solvent and fund its operations without reliance on practices that could cause harm. Projections should include base case and stress scenarios.

Governance and management: - Organisational chart showing reporting lines, committees and key functions - Management responsibilities map (for SM&CR purposes) - Details of proposed SMF holders, including CVs, fit-and-proper questionnaires and Statements of Responsibilities - Details of controllers (persons with significant influence over the firm) and qualifying holdings

Compliance framework: - Compliance monitoring programme - Complaints handling procedures - Financial promotions approval process - Conflicts of interest policy - Conduct risk framework - AML/CFT policies and procedures (including business-wide risk assessment)

Operational infrastructure: - IT systems and security arrangements - Business continuity and disaster recovery plans - Outsourcing arrangements and due diligence on third-party providers - Client money or assets arrangements (if applicable)

Phase 3: Submission and Initial Review

Applications are submitted through the FCA's Connect system. Upon receipt, the FCA conducts an initial completeness check. If the application is incomplete — missing documents, insufficient detail or incorrectly completed forms — the FCA will return it without starting the assessment clock.

Common reasons for applications being returned at this stage: - Missing financial projections or capital adequacy calculations - Incomplete SMF applications or fit-and-proper questionnaires - Generic or templated policies that do not reflect the applicant's specific business model - Failure to address all relevant regulatory requirements for the permissions sought

Phase 4: FCA Assessment

Once the FCA accepts the application as complete, the statutory determination period begins: - 6 months for most Part 4A authorisation applications - 3 months for variation of permission applications - 12 months for applications involving banking or insurance permissions

During assessment, the FCA evaluates the application against its threshold conditions (Schedule 6 of FSMA):

Effective supervision: Can the FCA effectively supervise the firm? Complex group structures, overseas controllers or opaque ownership arrangements may raise concerns.

Appropriate resources: Does the firm have adequate financial, human and technological resources to conduct its regulated activities? This includes capital, staffing, IT systems and compliance capability.

Suitability: Are the firm's management, governance arrangements and internal controls adequate? Are SMF holders fit and proper? Does the firm have a sound business model?

Business model: Is the business model viable and sustainable? Does it create unacceptable risks of consumer harm? The FCA will refuse applications where the business model depends on practices it considers harmful.

The FCA assessment process typically involves: - Detailed review of all submitted documentation - Written information requests (often multiple rounds) - Interviews with proposed SMF holders (particularly SMF1 and SMF16) - Assessment of fit-and-proper submissions for all proposed SMF holders - Review of the firm's financial position and projections

Phase 5: Determination

The FCA will either: - Grant authorisation — with the permissions sought (or a subset of them) - Grant authorisation with requirements — imposing conditions or limitations on the firm's activities (e.g., restrictions on product types, client categories or transaction volumes during an initial period) - Refuse authorisation — with written reasons and the opportunity for the firm to refer the decision to the Upper Tribunal

If the FCA is minded to refuse, it will issue a "Warning Notice" giving the firm an opportunity to make representations. If, after considering representations, the FCA still intends to refuse, it issues a "Decision Notice." The firm can then refer the matter to the Upper Tribunal for an independent determination.

Phase 6: Post-Authorisation

Early and high growth supervision: Newly authorised firms enter the FCA's "early and high growth" (EHG) supervision portfolio. During this period (typically 1–3 years), the firm receives enhanced supervisory attention, including: - Introductory supervisory meeting shortly after authorisation - Periodic check-ins to monitor the firm's progress against its business plan - Review of initial regulatory returns and complaints data - Potential on-site or desk-based assessments

Regulatory returns: From authorisation, the firm must submit regular regulatory returns — including financial returns, complaints data, transaction reports and (where applicable) client money and assets reports. Late or inaccurate returns are a common early trigger for supervisory concern.

Ongoing threshold conditions: The threshold conditions are not a one-off test. Firms must continue to satisfy them at all times. A material deterioration in financial resources, governance or compliance capability may result in the FCA varying or cancelling the firm's permissions.

Timeline and Cost Expectations

Realistic timeline expectations: - Pre-application planning and documentation: 2–4 months - FCA pre-application meeting: 4–8 weeks to schedule - Application submission to determination: 6–12 months (often longer for complex applications) - Total process: 10–18 months from initial planning to authorisation

Cost considerations: - FCA application fee: varies by activity and expected revenue (typically £1,500–£25,000) - Legal and compliance advisory fees: £30,000–£150,000+ depending on complexity - Capital requirements: varies significantly by firm type (£75,000–£750,000 for investment firms; €350,000+ for payment institutions) - Ongoing compliance costs: typically 5–15% of revenue for smaller firms

Practical Recommendations

Start early and allow buffer time. The authorisation process invariably takes longer than expected. Information requests from the FCA can add months to the timeline. Build contingency into your planning.

Invest in quality documentation. The FCA's assessment is document-driven. Well-drafted, specific and comprehensive documentation significantly increases the likelihood of a smooth assessment. Generic or templated materials will trigger additional questions and delays.

Prepare your SMF holders for interviews. FCA interviews with proposed CEO and compliance officers are common. Candidates should be able to articulate the firm's business model, risk profile, compliance approach and their personal understanding of regulatory requirements. Rehearsal is advisable.

Engage specialist advisers. While not mandatory, experienced regulatory advisers can significantly improve application quality and reduce timeline risk. Choose advisers with specific experience in your sector and the permissions you are seeking.