FCA Registration for Money Services Businesses — A Complete UK Guide

What Is a Money Services Business?

A money services business (MSB) is a firm that provides one or more of the following services: currency exchange (bureau de change), money transmission (sending or receiving money on behalf of customers), or cheque cashing. In the UK, MSBs are regulated primarily under the Money Laundering, Terrorism Financing and Transfer of Funds (Information on the Payer) Regulations 2017 (MLR 2017) and must register with the Financial Conduct Authority.

MSBs sit at the intersection of high-volume cash handling and cross-border remittance — two activity types the FCA and HM Treasury consider inherently higher risk for money laundering and terrorist financing. This guide explains the registration process, common pitfalls and ongoing obligations every MSB operator must understand.

Who Needs to Register?

Any person or entity carrying on MSB activities by way of business in the United Kingdom must be registered with the FCA before commencing operations. This applies to:

• Bureau de change operators — including high-street shops, airport kiosks and online FX platforms that physically exchange banknotes
• Money transmission businesses — firms that accept cash (or equivalent) from a sender and arrange for a corresponding amount to be paid to a recipient, typically cross-border
• Cheque cashers — businesses that encash cheques for customers in exchange for a fee

Firms that only provide payment services (not involving cash handling) may instead require authorisation as a Payment Institution under the Payment Services Regulations 2017 — a distinct and more onerous regime.

The Registration Process

Step 1 — Business-wide risk assessment. Before applying, you must complete a written risk assessment identifying the money-laundering and terrorist-financing risks your business faces. This must consider customer types, geographic exposure, product channels, delivery mechanisms and transaction patterns. The FCA expects this to be a living document, not a one-off compliance exercise.

Step 2 — AML/CFT policies and procedures. You must draft and implement policies covering customer due diligence (CDD), enhanced due diligence (EDD) for higher-risk relationships, ongoing monitoring, suspicious activity reporting (SARs), record-keeping and staff training. These policies must be proportionate to the risks identified in your business-wide risk assessment.

Step 3 — Fit-and-proper assessments. The FCA will assess every beneficial owner, officer and manager (BOOM) of the applicant firm. Each individual must demonstrate honesty, integrity, competence and financial soundness. Criminal records checks, credit checks and CV verification are standard. Any individual with unspent convictions for financial crime will almost certainly cause the application to fail.

Step 4 — Application submission. Applications are submitted via the FCA's Connect system. You must provide the business-wide risk assessment, AML policies, BOOM details, organisational charts, business plans and evidence of adequate resources. The statutory determination period is 90 days, but complex applications may take longer.

Step 5 — FCA assessment and determination. The FCA reviews the application against its registration criteria. It may request additional information, conduct site visits or interview key personnel. The FCA will refuse registration if it concludes the applicant's AML controls are inadequate or if any BOOM fails the fit-and-proper test.

Common Reasons for Refusal

The FCA publishes decision notices for refused MSB registrations. Recurring failure themes include:

• Inadequate risk assessments — generic or templated documents that do not reflect the applicant's actual business model, customer base or geographic exposure
• Weak CDD procedures — failure to articulate how the firm will verify customer identity, establish source of funds and apply EDD to higher-risk customers
• BOOM concerns — beneficial owners with undisclosed adverse financial history, unexplained gaps in employment or connections to jurisdictions subject to enhanced sanctions
• Insufficient resources — no dedicated compliance officer, no evidence of AML training programmes and no budget for ongoing monitoring technology
• Poor governance — absence of board-level oversight of financial crime risk, no escalation procedures for suspicious activity and no internal audit function

Ongoing Obligations After Registration

Registration is not a one-off event. The FCA expects registered MSBs to maintain compliance continuously. Key ongoing obligations include:

• Annual financial crime return — all registered MSBs must submit an annual return to the FCA detailing transaction volumes, SAR filings, CDD statistics and any material changes to the business
• Suspicious activity reporting — MSBs must file SARs with the National Crime Agency (NCA) whenever they know or suspect a transaction involves the proceeds of crime or terrorist financing
• Periodic risk reassessment — the business-wide risk assessment must be reviewed and updated at least annually or whenever there is a material change in business activities, customer base or geographic exposure
• Staff training — all relevant employees must receive AML/CFT training at induction and at regular intervals thereafter. Training must be documented and records retained
• Record-keeping — CDD records must be retained for five years after the business relationship ends. Transaction records must also be retained for five years

Enforcement and Supervisory Approach

The FCA takes a risk-based approach to MSB supervision. Higher-risk firms — those with significant cash volumes, exposure to high-risk jurisdictions or a history of compliance concerns — receive more intensive oversight. Supervisory tools include:

• Themed reviews and desk-based assessments
• Announced and unannounced site visits
• Skilled person reports (section 166 of FSMA 2000)
• Variation or cancellation of registration
• Civil and criminal penalties for serious AML failures

In recent years, the FCA has cancelled the registration of dozens of MSBs for inadequate AML controls. Firms that treat registration as a "set and forget" exercise are most likely to face enforcement action.

Practical Steps for Applicants

Invest in your risk assessment. This is the foundation document the FCA scrutinises most closely. It must be specific to your business — not a generic template purchased from a compliance consultancy. Identify your actual customer demographics, transaction corridors, cash-handling volumes and risk indicators.

Appoint a dedicated MLRO. The Money Laundering Reporting Officer (MLRO) must be a senior individual with genuine authority to escalate concerns and halt suspicious transactions. The FCA views the MLRO as a critical control and will assess their competence during the application process.

Budget for compliance technology. Manual transaction monitoring is inadequate for all but the smallest MSBs. Invest in screening software for sanctions, PEP and adverse media checks, and consider automated transaction monitoring if volumes justify it.

Prepare for ongoing supervision. Build compliance into your operating model from day one. Maintain contemporaneous records, document all CDD decisions and ensure your policies evolve as your business grows.

Regulatory Outlook

HM Treasury's 2024 consultation on reforming the MLR framework may introduce changes to MSB registration requirements from 2026. Potential reforms include a more granular risk-classification system for MSBs, enhanced information-sharing powers for the FCA and mandatory adoption of digital identity verification. Firms should monitor these developments and plan for potential additional obligations.