Appointed Representative vs Direct Authorisation: Making the Right Choice

What It Is

The choice between operating as an appointed representative and seeking direct FCA authorisation is one of the most consequential decisions a firm entering the UK regulated financial services market will make. It determines not only how the firm is regulated but who controls the firm's regulatory destiny, the cost structure of regulatory compliance, the degree of operational independence the firm enjoys, and the firm's strategic flexibility as it grows.

An appointed representative (AR) is a firm or individual that carries on regulated activities under the regulatory umbrella of an authorised firm known as the principal. The legal framework is section 39 of FSMA, which exempts an AR from the general prohibition on carrying on regulated activities provided that the AR has a written contract with an authorised principal, the principal has accepted responsibility for the AR's regulated activities, and the AR only carries on activities within the scope of that contract. The AR does not hold its own FCA authorisation — it is exempt from the requirement to be authorised by virtue of its relationship with the principal.

Direct authorisation, by contrast, means the firm applies to the FCA for its own authorisation under Part 4A of FSMA. The firm must satisfy the Threshold Conditions (Schedule 6 FSMA), submit a comprehensive application through Connect, and undergo the FCA's assessment process including Senior Manager interviews. Once authorised, the firm holds its own permissions, is subject to the full regulatory framework applicable to its activities, and is directly supervised by the FCA.

Both routes provide access to the regulatory perimeter, but the implications for the firm's governance, cost structure, commercial independence, and long-term strategic position are fundamentally different. Neither is inherently superior — the right choice depends on the firm's circumstances, ambitions, resources, and risk appetite.

Why the FCA Cares

The FCA has identified the appointed representative regime as a significant source of regulatory risk and consumer harm. In its July 2022 Dear CEO letter to principals, the FCA stated that it had found "significant levels of harm arising from the activities of appointed representatives" and that many principals were failing to adequately oversee their ARs. The regulator committed to a programme of enhanced supervision of the AR regime, including multi-firm reviews, thematic assessments, and targeted enforcement action.

The FCA's concerns centre on the incentive structure of the principal-AR relationship. Principals earn revenue from their ARs — through fees, revenue shares, or product charges — which can create a commercial incentive to onboard ARs without adequate due diligence and to tolerate compliance deficiencies that a more rigorous oversight approach would identify and address. The FCA has found cases where principals had hundreds of ARs but inadequate resources to supervise them, where ARs were carrying on activities outside the scope of their agreements, and where principals were aware of compliance failings but failed to take action because terminating an AR would reduce revenue.

This matters for the AR-versus-direct-authorisation decision because the FCA's scrutiny of the AR regime has increased the compliance burden on both principals and ARs. Principals are investing more in AR oversight — and passing those costs on to ARs through higher fees. ARs face more intensive monitoring from their principals, less operational autonomy, and greater risk of termination if the principal concludes that the oversight burden exceeds the commercial benefit. The FCA's interventions have also increased regulatory risk for ARs: if the principal faces enforcement action for oversight failures, the AR's business may be disrupted even if the AR itself has operated properly.

The FCA also cares about the AR regime because it affects transparency. Consumers dealing with an AR may not fully understand that the firm they are interacting with is not itself authorised — and that the principal, a firm the consumer has never heard of, is ultimately responsible for the AR's conduct. This information asymmetry can impede consumers' ability to seek redress and undermines trust in the regulatory framework. The FCA has introduced requirements to improve AR disclosure, but the inherent complexity of the arrangement remains a concern.

Who It Affects

The AR-versus-direct-authorisation decision affects any firm that intends to enter the UK regulated financial services market. It is particularly relevant for firms in sectors where the AR model is prevalent — insurance broking, mortgage advice, consumer credit, and investment advice. In these sectors, the AR route has historically been the dominant market entry strategy for small and medium-sized firms, and a substantial proportion of regulated activity is conducted through AR networks.

New market entrants face the decision most acutely. A startup firm with limited capital, no regulatory track record, and a small team may find the AR route attractive because it avoids the cost and complexity of the FCA application process, provides immediate access to the regulatory perimeter, and allows the firm to begin generating revenue while building the infrastructure needed for eventual direct authorisation. However, this short-term convenience comes at the cost of dependence on the principal and constraints on operational autonomy.

Existing ARs must also revisit the decision periodically. As an AR grows — in revenue, headcount, product range, and geographic reach — the costs and constraints of the AR arrangement may increasingly outweigh its benefits. The AR may be paying significant fees to its principal for a level of oversight and support that the firm could now provide for itself. The firm may be frustrated by the principal's restrictions on its activities, products, or operational processes. At this point, the strategic question shifts from "should we start as an AR?" to "when should we transition to direct authorisation?"

Principals are also affected, albeit from the other side. The FCA's enhanced scrutiny of the AR regime means that principals must invest more in due diligence, monitoring, and oversight of their ARs. Principals that fail to maintain adequate standards face enforcement action, reputational damage, and the operational disruption of having to terminate non-compliant ARs at the FCA's direction. This has made some principals more selective about the ARs they take on, more demanding in their oversight requirements, and more willing to terminate relationships that create regulatory risk.

What Firms Get Wrong

The most common mistake is treating the AR route as a permanent solution rather than a transitional arrangement. For many firms, starting as an AR makes sense — it provides a lower-cost entry point and allows the firm to test its business model within the regulatory perimeter before committing to the full cost of direct authorisation. But firms that remain as ARs indefinitely often find that the cumulative fees paid to the principal exceed the one-off cost of obtaining their own authorisation, while the restrictions on operational autonomy constrain business growth.

Firms also underestimate the dependency risk inherent in the AR model. The principal can terminate the AR agreement — typically on 30 to 90 days' notice — for any reason or no reason. If the principal loses its own authorisation, all its ARs must immediately cease regulated activities. If the principal is acquired by a competitor that restructures its AR network, the firm may find itself without a principal. These are not theoretical risks — they have materialised repeatedly, particularly in the insurance broking and financial advice sectors, leaving ARs scrambling to find alternative principals or apply for their own authorisation under urgent time pressure.

Another frequent error is assuming that AR status means lighter regulatory obligations. While the AR does not hold its own authorisation, it is still subject to significant regulatory requirements — including SMCR (since December 2019 for solo-regulated firms), financial promotions rules, conduct of business obligations under the applicable sourcebook, and the principal's own compliance requirements, which are often more prescriptive than the FCA's minimum standards. The FCA's extension of SMCR to the AR population, following its consultation in CP19/4 and PS19/7, means that ARs must now appoint Senior Managers, comply with the Conduct Rules, and maintain fitness and propriety standards in the same way as directly authorised firms.

Firms frequently underestimate the cost of transitioning from AR to direct authorisation when the time comes. The transition requires not just the FCA application itself but the development of an independent compliance function, regulatory reporting capabilities, financial resources, and governance arrangements. Firms that have been operating under a principal's compliance umbrella for years may find significant gaps when they attempt to stand alone. The principal's systems, monitoring tools, and reporting templates are not transferable — the firm must build or buy its own. Planning the transition 12 to 18 months in advance is essential; firms that leave it until the last moment face rushed applications, capability gaps, and operational disruption.

What Evidence Is Expected

For firms choosing the AR route, the principal will conduct its own due diligence — but the FCA also expects the AR to understand and evidence its compliance with regulatory requirements. The principal must notify the FCA before appointing an AR, providing details of the firm, the regulated activities it will carry on, and the principal's assessment of the AR's fitness and propriety. The FCA can object to the appointment, and it has exercised this power with increasing frequency following its 2022 review of the AR regime.

Principals are expected to evidence a comprehensive AR oversight framework. This includes documented due diligence on each AR before appointment, an ongoing monitoring programme that covers the AR's conduct of business, complaints, financial promotions, and customer outcomes, and a clear escalation and termination process for ARs that fail to meet acceptable standards. The FCA's expectations are set out in SUP 12 (Appointed Representatives) and were reinforced in its 2022 Dear CEO letter and subsequent supervisory communications.

For firms seeking direct authorisation, the evidence requirements are set out in the Threshold Conditions and the FCA's application forms. The firm must demonstrate: adequate financial resources under the applicable prudential regime; a viable and sustainable business model; competent and fit-and-proper Senior Managers with clear Statements of Responsibilities; a compliance monitoring programme tailored to the firm's specific activities; robust systems and controls including governance, risk management, and internal audit (where appropriate); and the ability to be effectively supervised by the FCA. The specific evidence requirements vary by firm type and the regulated activities applied for — CONC for consumer credit, ICOBS for insurance intermediation, MCOB for mortgage advice, and so on.

Firms transitioning from AR to direct authorisation should evidence their track record as an AR, including compliance monitoring results, complaint volumes and outcomes, and any regulatory issues that arose during the AR period. A clean AR track record strengthens the application; a history of compliance failings, customer complaints, or principal interventions will attract additional FCA scrutiny.

Good Implementation Looks Like

A firm that makes the AR-versus-direct-authorisation decision well begins with a strategic assessment, not a cost comparison. It considers not just the immediate financial implications but the long-term trajectory of the business, the degree of operational independence it requires, the risk tolerance of its founders and investors, and the regulatory landscape in its sector. It recognises that the cheapest route in year one may not be the most cost-effective over a five-year horizon.

If the firm chooses the AR route, it selects its principal carefully — assessing not just the commercial terms but the quality of the principal's compliance framework, the responsiveness of its oversight team, the stability of the principal's own regulatory position, and the terms of the AR agreement (particularly termination provisions and restrictions on activities). The firm treats the AR arrangement as a transitional phase and maintains a roadmap for eventual direct authorisation, including financial planning for the application cost and ongoing regulatory overhead.

If the firm chooses direct authorisation from the outset, it invests adequately in the application process. It engages regulatory advisers where it lacks internal expertise, develops a regulatory business plan that reflects genuine understanding of its obligations, prepares Senior Managers for FCA interviews, and builds compliance infrastructure that will be operational from day one of authorisation — not developed after the fact.

The best-run firms, regardless of which route they choose, maintain optionality. An AR builds the internal capabilities that would support direct authorisation, so that the transition can be executed smoothly when the time is right. A directly authorised firm keeps its cost base efficient and does not over-engineer its compliance infrastructure for the initial scale of the business. Both types of firm review the decision annually, reassessing whether their current arrangement remains optimal as the business evolves.

Related Tool

The MEMA FCA calculator provides a detailed cost comparison of the AR and direct authorisation routes. It models the total cost of each option over a three-to-five-year period, including application fees, periodic regulatory fees, principal fees (for ARs), prudential capital requirements (for directly authorised firms), compliance staffing costs, and the cost of regulatory infrastructure such as reporting systems and monitoring tools. The calculator uses current FCA fee rates and allows the firm to input its own assumptions about revenue growth, AR fees, and operational costs.

The perimeter assessment tool helps firms determine which regulated activities they will carry on and whether those activities can be conducted under an AR arrangement. Not all regulated activities can be performed by ARs — the scope of permissible AR activities is defined by the Appointed Representatives Regulations and the principal's own permissions. The tool identifies any activities that fall outside the AR scope and would require direct authorisation, helping firms avoid the common error of assuming that the AR route covers all their planned activities.

These tools provide a structured, data-driven foundation for the AR-versus-direct-authorisation decision, ensuring that firms consider the full financial and regulatory picture rather than making a choice based on headline costs alone.

Related Service

Our FCA authorisation service supports firms at every stage of the AR-versus-direct-authorisation decision. For firms evaluating their options, we provide a strategic assessment that considers the firm's business model, growth plans, risk appetite, and competitive position alongside the regulatory and financial analysis. We have worked with firms on both sides of the decision and can provide honest, experience-based guidance on which route is likely to serve the firm's interests best.

For firms choosing the AR route, we assist with principal selection, AR agreement review, and the development of internal compliance arrangements that satisfy both the principal's requirements and the FCA's expectations. We also help ARs prepare for the eventual transition to direct authorisation, building the internal capabilities and documentation that will be needed when the time comes.

For firms choosing direct authorisation — whether from inception or as a transition from AR status — we provide full application support. This includes regulatory business plan development, financial projections and capital planning, compliance monitoring programme design, Senior Manager interview preparation, and ongoing liaison with the FCA throughout the application process. Our experience with the Gateway team's assessment approach allows us to anticipate the questions and challenges that will arise and prepare the firm to address them effectively.

Related Sectors

Consumer credit is a sector where the AR model is widely used, particularly by credit brokers that introduce consumers to third-party lenders. The FCA's scrutiny of consumer credit ARs has intensified, with the regulator finding that some principals in this sector have inadequate oversight of their broker networks. Firms operating as consumer credit ARs should assess whether the increasing compliance burden and regulatory risk of the AR model still represents good value compared to direct authorisation — particularly if the firm has grown beyond the small-broker stage.

Insurance broking has one of the longest-established AR traditions in UK financial services. Many insurance intermediaries operate as ARs of networks or larger brokerages, particularly in the general insurance and life insurance markets. The FCA's AR review findings apply with full force to this sector, and several insurance principals have restructured their AR networks in response to regulatory pressure. Insurance ARs that rely on their principal for compliance support should ensure they have contingency plans in the event of principal termination.

Mortgage advice is another sector with significant AR activity, particularly through mortgage networks. The FCA's regulation of mortgage intermediaries under MCOB, combined with the SMCR extension to ARs, has increased the regulatory burden on mortgage ARs. Firms in this sector should consider whether the network model still provides sufficient value — particularly as the costs of network membership increase to cover the principal's enhanced oversight obligations. For established mortgage advisory firms with strong compliance capabilities, direct authorisation may offer a better long-term economic proposition while providing greater control over the firm's regulatory and commercial future.