FCA Authorisation Evidence: What the Gateway Team Expects

What It Is

FCA authorisation is the regulatory gateway that every firm must pass through before carrying on regulated activities in the UK. The application process is administered by the FCA's Authorisations Division (commonly known as the Gateway team) and assesses whether the firm meets the Threshold Conditions — the minimum standards for authorisation set out in Schedule 6 of FSMA.

The Threshold Conditions cover five areas: location of offices (the firm's head office and, if relevant, registered office must be in the UK); effective supervision (the FCA must be able to supervise the firm effectively); appropriate resources (the firm must have adequate financial and non-financial resources); suitability (the firm must be fit and proper, with competent management and a viable business model); and business model (the firm's business model must not pose undue risk to the FCA's objectives).

The application itself is submitted through the FCA's Connect portal and includes the application form, a regulatory business plan, financial projections, compliance arrangements documentation, details of proposed Senior Managers and their fitness and propriety, a compliance monitoring programme, and various supporting documents. The FCA assesses the application, raises additional information requests, conducts interviews with proposed Senior Managers, and ultimately determines whether to grant or refuse authorisation.

The process is not a rubber stamp. The FCA refuses a material proportion of applications and issues "minded to refuse" notices that lead many applicants to withdraw. Understanding what the Gateway team expects — and what causes applications to fail — is essential to a successful outcome.

Why the FCA Cares

The authorisation gateway is the FCA's first line of defence. Every firm that is granted authorisation enters the regulatory perimeter and gains the trust that comes with FCA regulation — including access to the Financial Services Compensation Scheme, the right to approve financial promotions, and the credibility that regulated status confers with consumers and counterparties.

If the gateway is weak, unsuitable firms enter the market, and the FCA's subsequent supervisory burden increases exponentially. It is far more efficient and effective to prevent a poorly governed, under-resourced, or unsuitable firm from being authorised in the first place than to supervise it into compliance or take enforcement action after harm has occurred.

The FCA has invested significantly in strengthening the gateway function. Following criticism that authorisation standards were too lax — particularly in the consumer credit sector after the transfer from the OFT in 2014 — the FCA has increased the rigour of its assessments, introduced more extensive interview processes, and raised the evidential bar for applications. The regulator now expects applications to demonstrate not just that the firm meets the Threshold Conditions at the point of authorisation but that it will continue to meet them on an ongoing basis.

The FCA also uses the gateway to manage systemic risk. If a particular sector is experiencing rapid growth, elevated consumer harm, or significant market entry, the FCA may apply enhanced scrutiny to applications in that sector. Payment services, consumer credit, and claims management are examples of sectors where gateway standards have been tightened in response to market conditions.

Who It Affects

Any business that intends to carry on a regulated activity in the UK must either obtain FCA authorisation or fall within an exemption (such as the appointed representative regime). This includes firms seeking authorisation for the first time — new market entrants, startups, and overseas firms establishing a UK presence — as well as existing authorised firms seeking to vary their permissions to carry on additional regulated activities.

The application process is particularly relevant for consumer credit firms (where the perimeter is broad and many businesses may not initially realise they require authorisation), payment services firms and e-money issuers (who require registration or authorisation under the PSRs or EMRs), insurance intermediaries (who need appropriate permissions for the types of insurance they arrange or advise on), and investment firms (who require permissions aligned to their specific activities — dealing, arranging, advising, or managing).

Professional services firms — accountants, solicitors, and surveyors — that carry on regulated activities may be able to rely on the professional bodies exemption (Part XX FSMA) rather than seeking direct authorisation, but the conditions are specific and the exemption does not cover all activities.

The directors, partners, and proposed Senior Managers of applicant firms are also directly affected. The FCA assesses each proposed SMF holder as part of the application, and an adverse assessment of a key individual can delay or prevent the firm's authorisation.

What Firms Get Wrong

The most common deficiency is an inadequate regulatory business plan. The FCA expects a document that demonstrates a thorough understanding of the business the firm intends to conduct, the risks it will face, and how those risks will be managed. Too many applicants submit business plans that read like marketing documents — strong on commercial ambition but thin on regulatory substance. The Gateway team wants to see: a clear description of each regulated activity to be performed; the target market and how the firm will ensure products are appropriate for it; the risks inherent in the business model (including financial crime, conduct, operational, and prudential risks); and how the firm will mitigate those risks through governance, systems, and controls.

Financial projections are frequently unrealistic. Firms either project profitability from day one (which the FCA regards as unrealistic for most new entrants) or fail to demonstrate that they have sufficient capital to sustain the business through the early loss-making period. The FCA expects projections that show a realistic path to viability, with clear assumptions, sensitivity analysis, and evidence that the firm has access to sufficient financial resources — not just at the point of authorisation but for at least the first 12 to 18 months.

Compliance arrangements are often underdeveloped. The FCA expects a compliance monitoring programme that is tailored to the firm's specific business activities and risks — not a generic template downloaded from the internet. The programme must cover all regulatory obligations, set out a monitoring schedule, and identify how breaches or deficiencies will be identified, escalated, and remediated.

Proposed Senior Managers frequently underperform at interview. The FCA interviews are substantive assessments. Interviewers expect individuals to demonstrate detailed knowledge of the firm's business model, the regulatory framework applicable to the firm's activities, the specific risks the firm will face, and how the individual will discharge their responsibilities. Candidates who cannot articulate what they will be accountable for, what MI they will review, or how they will challenge management are unlikely to gain approval.

Finally, applications are too often incomplete at submission. Missing documents, unsigned forms, and gaps in the supporting evidence result in the application being returned as incomplete. The statutory determination period does not begin until the application is complete, so incompleteness adds months to the process with no corresponding benefit.

What Evidence the FCA Expects

The Gateway team expects a comprehensive evidence package that addresses each Threshold Condition. For appropriate resources, this includes: financial projections for at least three years; evidence of access to capital (bank statements, loan agreements, or investor commitments); details of the firm's IT systems, premises, and operational infrastructure; and evidence that the firm has appropriately skilled and experienced staff.

For suitability, the FCA expects: CVs and regulatory track records for all proposed Senior Managers; Statements of Responsibilities for each SMF holder; DBS checks and credit checks for individuals in controlled functions; evidence of relevant qualifications and competence; and a compliance monitoring programme that is tailored, realistic, and demonstrably linked to the firm's actual business activities.

For the business model condition, the FCA expects: a regulatory business plan that demonstrates commercial viability without reliance on practices that could cause consumer harm; an analysis of the competitive landscape; a clear articulation of how the firm will generate revenue; and evidence that the business model is sustainable on an ongoing basis.

For effective supervision, the FCA expects: a clear organisational structure with defined reporting lines; evidence that the firm's systems allow for accurate and timely regulatory reporting; and confirmation that the firm's arrangements do not create barriers to effective FCA oversight.

The FCA also expects honest, forthcoming responses to information requests during the application process. Applicants that are evasive, provide inconsistent information, or appear to be withholding material facts will face adverse inferences.

Good Implementation

A successful application starts with preparation — ideally six to twelve months before submission. The firm assembles a project team that includes at least the proposed compliance officer and a senior decision-maker. If the firm lacks regulatory experience, it engages specialist advisers early.

The regulatory business plan is drafted as a substantive governance document, not a compliance afterthought. It is honest about the firm's risk profile, realistic about its financial trajectory, and specific about its compliance arrangements. It is reviewed by the proposed Senior Managers, who can speak to its content fluently at interview.

Proposed Senior Managers prepare for their FCA interviews by studying the firm's business plan, understanding the regulatory framework applicable to each of the firm's activities, and rehearsing answers to the types of questions the Gateway team typically asks. They can explain their Statement of Responsibilities in practical terms and articulate how they will maintain oversight of their areas of accountability.

The compliance monitoring programme is developed before submission and reflects the firm's actual planned activities. It identifies the key regulatory risks, sets out a proportionate monitoring schedule, and describes how the compliance function will report to senior management and the board.

Financial resources are secured and documented before submission. The firm has headroom above its minimum capital requirement and can demonstrate access to additional capital if needed during the startup phase.

How Our Tool Helps

The MEMA FCA authorisation checklist provides a structured framework for preparing your application. It maps every Gateway team requirement to a specific evidence item, tracks your preparation progress, and highlights gaps before you submit. The checklist is sector-specific — reflecting the different evidential expectations for consumer credit firms, payment services firms, insurance intermediaries, and investment firms.

The FCA calculator module computes your minimum capital requirement under the applicable prudential regime (MIFIDPRU, IPRU-INV, or IPRU-FSOC) and helps you model financial projections that demonstrate capital adequacy throughout the startup period. It flags where your projections fall below regulatory minimums and prompts you to address the shortfall.

Together, these tools significantly reduce the risk of an incomplete or deficient application reaching the Gateway team, saving you the months of delay that result from an application being returned.

How Our Service Helps

Our FCA authorisation service provides end-to-end support for the application process. We begin with a perimeter assessment to confirm which permissions you need, then work with you to develop the regulatory business plan, financial projections, compliance monitoring programme, and all supporting documentation.

We prepare your proposed Senior Managers for their FCA interviews, drawing on direct knowledge of the Gateway team's assessment approach and the types of questions they ask across different firm types and permission profiles. Interview preparation is one of the highest-value elements of our service — the difference between a well-prepared and poorly prepared candidate can determine whether the application succeeds.

Throughout the application process, we manage the dialogue with the FCA, responding to additional information requests promptly and substantively. We anticipate the questions the Gateway team will raise based on the firm's business model and ensure that responses are comprehensive and consistent with the original application.

For firms that have previously had an application refused or withdrawn, we conduct a gap analysis against the reasons for the previous failure and build a remediation plan that addresses each deficiency before resubmission.

Relevant Sectors

Consumer credit firms face some of the highest refusal rates at the gateway. The FCA has applied enhanced scrutiny to consumer credit applications since inheriting the consumer credit regime from the OFT in 2014. Common deficiencies include inadequate affordability assessment processes, insufficient financial resources, lack of relevant experience among proposed Senior Managers, and business plans that rely on aggressive lending practices.

Payment services firms and e-money issuers face a gateway process that reflects the FCA's concerns about financial crime risk in the payments sector. Applications must demonstrate robust anti-money laundering controls, transaction monitoring capabilities, and safeguarding arrangements. The FCA scrutinises the firm's technology infrastructure and its ability to manage operational risk. Novel business models face particular scrutiny — the Gateway team will test whether the firm has genuinely considered the risks of its model or simply assumed that innovation justifies lighter regulation.

Insurance brokers must demonstrate that their proposed activities fall within the permissions sought and that they have the competence, resources, and systems to conduct those activities safely. The FCA pays close attention to professional indemnity insurance arrangements, client money handling capabilities (where applicable), and the qualifications and experience of client-facing staff. Firms proposing to operate through appointed representative networks face additional scrutiny on their oversight arrangements — the FCA will want to see a credible plan for monitoring and controlling AR activity from day one.