Safeguarding Reconciliation: Best Practice Guide for Payment Firms

Why Reconciliation Is Critical

Reconciliation is the mechanism that gives safeguarding its practical force. Without accurate, timely reconciliation, a firm cannot demonstrate that it holds sufficient funds to meet all customer claims. The FCA has consistently identified poor reconciliation as one of the most common safeguarding failures, and it is frequently the trigger for supervisory intervention.

The purpose of reconciliation is twofold. First, it confirms that the firm is holding enough money in safeguarding accounts to cover all customer entitlements at any given point. Second, it identifies discrepancies — known as breaks — that require investigation and resolution.

Regulatory Framework

For payment institutions authorised under the Payment Services Regulations 2017 (PSR 2017), Regulation 23 requires that relevant funds are safeguarded by the end of the business day following receipt. The FCA's Approach Document for payment services firms further specifies that reconciliation must be performed at least daily.

For EMIs authorised under the Electronic Money Regulations 2011 (EMR 2011), Regulation 21 imposes equivalent safeguarding obligations. The reconciliation requirements mirror those for payment institutions.

The FCA has not prescribed a single reconciliation methodology. Instead, it expects firms to design processes that are appropriate to their business model, transaction volumes and complexity. However, the regulator has been clear about what constitutes inadequate reconciliation, providing substantial supervisory guidance through Portfolio Letters and thematic reviews.

The Two Pillars of Reconciliation

Internal reconciliation is the process of comparing the firm's record of what it owes to individual customers against the total figure shown as customer liabilities on the firm's ledger. This catches errors in individual account postings, failed transactions that have not been properly reversed, and fee deductions that have been incorrectly calculated.

The internal reconciliation must account for all customer-facing products and payment flows. For firms operating across multiple currencies, this means reconciling each currency separately and converting to a common base for comparison.

External reconciliation compares the firm's total customer liability figure against the actual balances held in safeguarding accounts, as confirmed by bank statements or real-time banking feeds. This is the critical check that confirms sufficient funds are being held.

The external reconciliation must capture all safeguarding accounts across all banking partners. Firms that hold safeguarded funds with multiple banks must aggregate balances for comparison against total obligations.

Designing a Robust Reconciliation Process

Step 1 — Establish the customer entitlement figure. Extract from the firm's core systems the total amount owed to all customers at the reconciliation point. This must include: e-wallet balances, funds in transit, pending transactions, and any amounts that have been received but not yet credited to customer accounts.

Step 2 — Identify permitted deductions. The firm may deduct fees that it has earned and is entitled to retain. These deductions must be calculated accurately and documented. Over-deduction of fees is a common source of reconciliation breaks and regulatory concern.

Step 3 — Obtain safeguarding account balances. Source the balance of all designated safeguarding accounts from bank statements or real-time feeds. Ensure that in-flight payments (sent but not yet settled) are properly accounted for in the reconciliation methodology.

Step 4 — Compare and document. The total safeguarding balance should equal or exceed the net customer entitlement figure (after permitted deductions). Any shortfall is a break requiring immediate investigation. A surplus is generally acceptable but should also be investigated, as it may indicate an error in the customer ledger.

Step 5 — Investigate breaks. Every break must be investigated to root cause, resolved within a defined timeframe, and documented. The FCA expects firms to maintain a breaks register showing the date, amount, cause, resolution and time to resolution for each break.

Common Reconciliation Failures

The FCA's supervisory work has identified recurring problems in firms' reconciliation processes:

• Incomplete scope. Failing to include all customer fund flows in the reconciliation, such as pending transactions, funds held in agent accounts, or amounts in transit between banks.

• Manual processes. Relying on spreadsheets for reconciliation in firms processing significant transaction volumes. Manual processes are inherently error-prone and do not provide adequate audit trails.

• Timing mismatches. Performing internal and external reconciliations at different cut-off times, creating artificial breaks that obscure genuine discrepancies.

• Inadequate break investigation. Treating breaks as routine operational items rather than potential safeguarding failures. The FCA expects every break to be treated seriously, with documented investigation and resolution.

• No governance oversight. Reconciliation results are not reported to senior management or the board. The FCA views safeguarding governance as a board-level responsibility.

• Currency conversion errors. For multi-currency firms, failing to use consistent exchange rates or not reconciling each currency separately before aggregation.

Automation and Technology

Firms processing more than a few hundred transactions daily should invest in automated reconciliation systems. These systems provide several critical advantages:

Real-time matching. Automated systems can match individual transactions across internal ledgers and bank statements in real time, identifying breaks as they occur rather than at end-of-day.

Audit trail. Every reconciliation run, break, investigation and resolution is automatically logged, creating the documentary evidence the FCA expects.

Exception-based workflow. Rather than reviewing every transaction, staff focus on exceptions flagged by the system. This is both more efficient and more effective at identifying genuine issues.

Scalability. Manual reconciliation processes break down as transaction volumes grow. Automated systems scale without proportional increases in headcount.

When selecting or building a reconciliation system, firms should ensure it can handle: multiple currencies, multiple safeguarding accounts, intraday reconciliation cycles, configurable matching rules, and integration with banking platforms for real-time balance feeds.

Governance and Reporting

The FCA expects safeguarding reconciliation to be embedded within the firm's broader governance framework. This means:

Clear ownership. A named individual — typically the Head of Finance or Head of Compliance — must be responsible for the reconciliation process and its outputs. This individual should report directly to the board on safeguarding matters.

Regular reporting. The board should receive regular reports on: reconciliation completion rates, the number and value of breaks identified, the time taken to resolve breaks, any systemic issues identified, and the adequacy of safeguarding balances.

Independent review. The reconciliation process should be subject to periodic independent review, either by internal audit or an external party. This review should assess whether the methodology is sound, the process is being followed consistently, and the governance arrangements are effective.

Escalation procedures. Documented procedures must specify when and how breaks are escalated. Material breaks — typically defined by value or duration — should trigger immediate escalation to senior management and potentially notification to the FCA.

FCA Expectations and Supervisory Approach

The FCA assesses reconciliation adequacy through several channels:

• Routine supervisory visits and desk-based reviews
• Responses to information requests (Section 165 notices)
• Skilled person reviews (Section 166 reports)
• Analysis of regulatory returns

The regulator looks for evidence that reconciliation is: performed daily or more frequently, comprehensive in scope, accurately documented, subject to governance oversight, and that breaks are investigated promptly and resolved effectively.

Firms that cannot demonstrate these elements risk supervisory intervention, which may include requirements to appoint a skilled person, restrictions on business activities, or directions to hold additional capital.

Practical Recommendations

Document everything. Maintain a safeguarding reconciliation policy that describes the methodology, frequency, roles and responsibilities, escalation procedures and governance arrangements. Update it annually or when material changes occur.

Test your process. Periodically test the reconciliation process by introducing artificial breaks to confirm they are detected, investigated and escalated correctly.

Plan for growth. If your firm is growing, assess whether your current reconciliation process will scale. Investing in automation before problems emerge is far preferable to retrofitting systems after a regulatory finding.

Maintain an inspection-ready file. Keep reconciliation records, breaks registers, governance minutes and policy documents organised and accessible. The FCA may request this documentation at short notice.