MEMA Guides / FCA authorisation
Appointed representative or direct FCA authorisation?
Compare control, oversight, speed and commercial dependence, and see the point at which an appointed representative structure becomes the wrong fit.
- 30 daysthe minimum notice a principal must give the FCA before a new AR's appointment takes effectSource
- 12 monthsthe longest a principal may go between reviews of each AR (other than introducer ARs)Source
- New FRNa directly authorised firm gets a different Firm Reference Number from its AR numberSource
The guide in 30 seconds
Practical guidance- 01The principal is responsibleIt answers for what its AR does within the business it has accepted responsibility for.
- 02Not every activity fitsSome business cannot be done as an AR, and payment agents sit under a different regime.
- 03Plan the exit on day oneDirect authorisation is a separate application, with its own timetable and standards.
Explore the chapters
Read them in order, or jump to the one you need.
01What the two models actually meanA principal is not just lending the use of its FCA reference number. It takes on responsibility for the AR's regulated business.
02Which activities can an AR carry on?Do not assume every regulated or payment activity can sit in one AR agreement.
03The economics and operational trade-offsAR arrangements can shorten the road to launch, but a model that works at launch can be restrictive at scale.
04Worked example: an insurance comparison businessThe point of difference is how independently the business needs to operate, and when its plans outgrow its scope.
05What a principal should test, and what the AR should askThe FCA expects ongoing oversight, not a one-off onboarding check. The same details matter if you plan to move on.
06Decision checklist: AR or direct?Document the route choice against the next two years of the business plan.
Chapter 01 · The starting point
What the two models actually mean
A principal is not just lending the use of its FCA reference number. It takes on responsibility for the AR's regulated business.

An appointed representative (AR) carries on regulated activity under the responsibility of an authorised firm, known as the principal. Under section 39 of the Financial Services and Markets Act 2000 (FSMA), an AR is an exempt person for the business its principal has accepted responsibility for. The AR must not itself be an authorised person, and needs a written contract with the principal.
The principal is responsible, to the same extent as if it had expressly permitted it, for anything the AR does or omits to do in that business. It must make sure the AR is fit and proper, financially stable and complies with the FCA's rules. An introducer appointed representative (IAR) is narrower: its scope is limited to effecting introductions and distributing non-real time financial promotions.
A directly authorised firm holds its own Part 4A permission. It becomes responsible for compliance with the rules, the liabilities of its business and its own senior management arrangements. It must show the FCA it meets the threshold conditions and that it is ready, willing and organised.
| Issue | AR route | Direct authorisation |
|---|---|---|
| Regulatory permission | Business covered by the principal's acceptance of responsibility, set out in a written AR agreement | The firm holds its own permissions |
| Oversight | The principal supervises, reviews at least every 12 months and keeps the regulatory responsibility | The firm designs and evidences its own compliance framework |
| Control | Within the limits, monitoring and approvals the principal sets | More direct control, within the FCA's rules |
| Commercial relationship | Agreement terms, fees, termination and data arrangements matter a great deal | Separate supplier contracts, and direct dealings with the FCA |
| Growth | New activities need the principal's scope and consent | New activities may need a variation of permission |
Who does what
Principal
Assesses, appoints, notifies the FCA, oversees and reviews the AR, and is responsible for its regulated business.
Appointed representative
Carries on only the business in the written agreement, and complies with the FCA's rules as the principal requires.
FCA
Receives the principal's notification and supervises the principal, which must be able to oversee its ARs.
Chapter 02 · Perimeter first
Which activities can an AR carry on?
Do not assume every regulated or payment activity can sit in one AR agreement.

The AR exemption works only for the types of business set out in the Appointed Representatives Regulations, and only for activities the principal has agreed to take responsibility for. The FCA's Handbook says regulated claims management activity is not business for which an AR may be exempt.
Payments are a different regime. A payment institution registers its own agents under the Payment Services Regulations 2017, and an agent of an e-money institution is registered by its principal under the Electronic Money Regulations. Do not call these FSMA appointed representatives.
Chapter 03 · A fast start can mean a long dependency
The economics and operational trade-offs
AR arrangements can shorten the road to launch, but a model that works at launch can be restrictive at scale.

An AR does not need its own authorisation, but the principal still has to onboard and assess it, and then oversee it on an ongoing basis. The fee model may be fixed, revenue-based or mixed. The principal may control products, approved suppliers, sales materials and sometimes customer contact or data.
Direct authorisation needs more internal capability at the start, and a firm that wants control of its products, providers and regulatory relationships may find it worth the effort. It does not remove the cost of compliance, reporting or, for some firms, professional indemnity insurance. Compare the total cost over 24 months, including the cost of leaving, not just the first invoice.
The same decision from three seats
What the business gains and gives up.
- Gains: a route to market without a standalone application
- Gives up: control of products, suppliers and materials
- Must accept the principal's monitoring and approvals
- Watch fees, termination notice and who owns customer data
What it must be able to do.
- Hold the permissions and have the resources to oversee the AR
- Assess fitness, propriety and financial stability before appointing
- Monitor continuously, review at least every 12 months
- Keep a self-assessment signed off by its governing body
What the regulator tells firms.
- Principals are responsible for ARs on an ongoing basis
- Oversee ARs to the same standard as your employees
- Reassess if an AR grows significantly or its scope changes
- An AR may consider direct authorisation if it outgrows its principal
Chapter 04 · An invented firm
Worked example: an insurance comparison business
The point of difference is how independently the business needs to operate, and when its plans outgrow its scope.

How Hollin's structure should change as the plan does
Stage 1 of 3
Referrals
An IAR can effect introductions and distribute non-real time financial promotions. Test that the website really stays within that.
- Keep wording clear of anything that looks like advice
- Agree promotion approval with the principal
Stage 2 of 3
Recommending
Recommending policies and negotiating terms goes beyond an IAR's permitted scope. The business needs a broader AR arrangement or its own authorisation.
- Do not drift beyond the agreed scope
- Assess the principal's permissions
Stage 3 of 3
Five insurers
Working with five insurers raises control, product access and commission questions that a single principal may not accommodate.
- Compare principal terms with direct authorisation
- Plan the move with the principal
The same applies to a motor finance introducer that starts under a principal and later wants broader lender access, more control over commission or extra credit activities. Do not carry on activities outside the agreed scope while you plan the transition.
Chapter 05 · Oversight in practice
What a principal should test, and what the AR should ask
The FCA expects ongoing oversight, not a one-off onboarding check. The same details matter if you plan to move on.

A principal must notify the FCA at least 30 calendar days before an appointment takes effect. It must review each AR at least every 12 months, looking at senior management's fitness and propriety, the AR's financial position and the adequacy of its own controls and resources. It must keep a written record of each review.
Moving from AR to direct authorisation
- EarlyWarn your principal you will need a referenceThe FCA may contact them while processing your application.
- Before applyingAgree access to client files and future liabilitiesYour principal remains responsible for business you carried on as its AR.
- ApplicationShow you are ready, willing and organisedThis is a separate application, not an automatic upgrade.
- On authorisationA new Firm Reference NumberCheck your agreement lets you keep dealing with existing customers.
Questions for each side
- Principal: fitness and propriety, finances, controls, senior people, business changes and customer harm
- AR: the exact authorised activity, approval delays, reporting duties, fees, liability, termination and data portability
- Both: Consumer Duty responsibilities where relevant, complaints, vulnerable customers, promotions approval and training
- Transition: who serves existing customers, handles old complaints and keeps regulatory records after you leave
Chapter 06 · Put it to work
Decision checklist: AR or direct?
Document the route choice against the next two years of the business plan.

Use an AR where the principal relationship genuinely fits the model and oversight can work. Choose direct authorisation when independent permissions and operating control outweigh the initial effort. The FCA also lists signs that an AR should consider moving: it has become larger than its principal, there are conflicts of interest in the model, or the business no longer aligns with the principal's direction.
Is the route decision ready?
Tick each item you can evidence. Your ticks stay in this browser only.
| Question | Short answer |
|---|---|
| Can I start regulated activity as soon as I sign an AR agreement? | No. Your principal's notification must reach the FCA at least 30 days before you start regulated activities (SUP 12.7.1R), and the written AR agreement must be in place. |
| Can an IAR give regulated advice? | No. An IAR's scope is introductions and distributing non-real time promotions. Any advice needs a separate permissions assessment. |
| Does leaving a principal authorise my company? | No. Direct authorisation is a separate application, and it does not override contractual duties to your principal. |
Where this comes from
Sources
Every number and rule in this guide comes from these pages. Check them before you rely on anything, as rules change.
- FCA: Responsibilities and how to oversee your appointed representatives
- FCA: Become an appointed representative
- FCA: Move from being an appointed representative to being directly authorised
- FCA Handbook, SUP 12: Appointed representatives
- FCA: How to apply for authorisation or registration
- FCA: Payment institution applicants
- FCA Handbook, PERG 15: Guidance on the scope of the Payment Services Regulations 2017
This guide is general information, not legal or regulatory advice. Rules and FCA expectations change; check the sources and take advice on your firm's circumstances.
