FCA Authorisation Timeline 2026: What to Realistically Expect

Every firm founder considering FCA authorisation asks the same question within the first five minutes of any advisory conversation: "How long will this take?" It is the question that shapes business plans, determines launch dates, and, when answered poorly, leads to frustrated founders staring at an inbox waiting for a case officer who assigned their application to the bottom of a very tall pile. The honest answer is that it depends, but it will almost certainly take longer than you hope and shorter than it needs to be if you invest properly in preparation.

The gap between expectation and reality is where most of the pain lives. We have seen firms told by well-meaning accountants that authorisation takes "about three months," only to find themselves eleven months into a process with no decision in sight. We have also seen firms who prepared meticulously, submitted a flawless application, and received their permissions within fourteen weeks. The difference was never luck. It was always preparation, and it was always rooted in understanding how the FCA actually processes applications rather than how firms wish it worked.

The FCA publishes statutory timelines, but the real clock starts months before you submit. Understanding each phase — and where firms lose weeks — is the difference between a 12-week process and a 12-month ordeal.

The FCA's Official Position on Timelines

The Financial Conduct Authority operates under statutory assessment periods set out in the Financial Services and Markets Act 2000. These periods represent the maximum time the FCA has to determine a complete application, and the regulator publishes them clearly in its handbook and on its website. What it does not publish with equal prominence is that these clocks only start ticking once the FCA deems an application complete, and that "complete" in the regulator's eyes often differs markedly from what applicants believe they have submitted.

The statutory periods vary depending on the type of application and the complexity of the permissions sought. For a straightforward authorisation, the FCA has six months from acceptance of a complete application. For variations of existing permissions, the same six-month window applies, though in practice these tend to move faster because the firm already has a regulatory track record.

The critical detail in this table is the second row. When the FCA issues an information request, the statutory clock stops entirely. It does not pause; it stops. The clock only restarts when the FCA is satisfied that the firm has provided everything requested, and the regulator makes that determination in its own time. In 2025, the average clock-stop period across all application types was approximately seven weeks, but for complex applications involving multiple regulated activities, we have seen clock-stops extend to sixteen weeks or more. Every one of those weeks represents time that does not count against the FCA's statutory deadline but very much counts against your business plan.

Phase by Phase: The Real Journey

The formal FCA assessment is only one segment of a much longer process. When experienced compliance consultants talk about authorisation timelines, they count from the moment a firm begins serious preparation, not from the date Connect accepts the submission. The full journey, from first regulatory conversation to permissions granted, typically spans five distinct phases, each with its own pitfalls and each offering opportunities to either compress or extend the overall timeline.

Scoping and Permissions Mapping (Weeks 1-3)

Before a single form is completed, a firm must determine precisely which regulated activities it intends to carry out and which FCA permissions it needs to conduct those activities lawfully. This sounds straightforward but it is the phase where the most consequential mistakes are made. A firm that applies for the wrong permissions will either be rejected outright or, worse, granted permissions that do not cover its intended business model, requiring a costly variation of permission application months later.

The scoping phase involves mapping every product, service, and client interaction against the FCA's Regulated Activities Order (RAO) and the regulatory perimeter. For firms operating in areas where the perimeter is ambiguous, such as certain fintech business models, payment services, or hybrid advisory-and-discretionary propositions, this analysis can be genuinely complex. Our Perimeter Assessment tool provides an initial framework, but the critical output of this phase is a definitive permissions map that aligns your commercial intentions with the FCA's regulatory categories.

Firms that rush this phase or treat it as a formality almost always pay for it later. We reviewed over forty applications in 2025 where the original permissions request had to be amended after submission, either because the firm had over-scoped (requesting permissions it did not need, which invites additional scrutiny) or under-scoped (missing permissions essential to its business model). Each amendment added an average of five weeks to the process.

Building Your Regulatory Infrastructure (Weeks 3-8)

Once permissions are mapped, the firm must build the regulatory infrastructure that will convince the FCA it can meet threshold conditions on an ongoing basis. This is the most labour-intensive phase and the one where quality of preparation has the greatest impact on overall timeline. The FCA does not simply want to see that a firm has policies; it wants to see that those policies are tailored to the firm's specific business model, proportionate to its risk profile, and evidently understood by the people who will implement them.

The core deliverables during this phase include a regulatory business plan that meets the FCA's expectations (which are considerably more detailed than a commercial business plan), a compliance monitoring programme, a complaints handling procedure, financial projections demonstrating adequate capital resources, and a complete Senior Managers and Certification Regime mapping. The SMCR mapping is particularly important because the FCA will scrutinise who holds which senior management functions and whether those individuals have the competence and integrity to discharge their responsibilities. Our SMCR Navigator helps firms work through the allocation of prescribed responsibilities and the identification of certification functions, but the underlying work of documenting accountabilities and building governance frameworks requires genuine organisational effort.

The compliance manual alone typically runs to sixty or more pages for even a modest advisory firm, and it must be bespoke. The FCA's case officers have seen thousands of applications and they can identify a template compliance manual within seconds. Firms that submit generic documents downloaded from the internet or purchased from document mills face almost certain information requests, and those requests will ask the firm to explain, in specific terms, how each policy applies to its particular circumstances. It is far more efficient to write it properly the first time.

Application Submission (Weeks 8-10)

The FCA's Connect system is the gateway for all authorisation applications, and navigating it successfully requires attention to detail that borders on the obsessive. The system asks a structured series of questions, requests supporting documents, and requires specific information about the firm's controllers, senior managers, and regulatory arrangements. A well-prepared firm can complete the Connect submission in two to three weeks, but this assumes that all supporting documents are finalised, all individual forms (for senior managers and controllers) are ready to submit simultaneously, and the firm has resolved any corporate structure questions that might complicate the application.

Common errors at this stage include submitting individual applications for senior managers separately from the firm application (they should be submitted together), failing to provide adequate detail in the business plan section of Connect, uploading documents in formats the system cannot process, and neglecting to pay the correct application fee. The FCA charges between 1,500 and 25,000 pounds depending on the type of permissions sought, and submitting the wrong fee is a surprisingly common cause of administrative delay. For a comprehensive breakdown of all associated costs, our analysis of FCA authorisation costs in 2026 provides the complete picture.

The moment the FCA accepts the application as complete and acknowledges receipt, the statutory clock begins. This acknowledgement typically arrives within five to ten working days of submission, though during busy periods it can take longer. Until that acknowledgement arrives, the firm is in regulatory limbo, and any deficiency identified at this stage will result in the application being returned rather than assessed.

FCA Assessment and Questions (Weeks 10-22)

Once the application is accepted, it is assigned to a case officer within the FCA's Authorisations Division. The case officer becomes the firm's primary point of contact and is responsible for assessing whether the firm meets the threshold conditions for authorisation. These conditions, set out in Schedule 6 of FSMA, require the firm to demonstrate that it has appropriate resources (both financial and human), that its business model is viable, that its senior managers are fit and proper, and that its regulatory arrangements are adequate for the activities it proposes to carry out.

The case officer will review every document submitted, cross-reference information provided in Connect against supporting materials, and conduct background checks on all proposed senior managers and controllers. In approximately seventy percent of cases, the case officer will issue at least one information request, formally known as a "requirement for further information." These requests stop the statutory clock and require a written response, usually within twenty-eight days, though shorter deadlines are sometimes imposed for straightforward queries.

The quality of responses to information requests is one of the strongest predictors of overall application outcome. A firm that responds promptly, comprehensively, and with supporting evidence will typically see its application progress to decision within four to six weeks of responding. A firm that provides vague or incomplete responses, or that takes the full twenty-eight days to answer a simple question, signals to the case officer that it may lack the organisational capability to operate as a regulated firm. This is not a signal any applicant wants to send. For firms navigating this process for the first time, our complete guide to FCA authorisation walks through each stage in greater detail, including how to handle information requests effectively.

Decision and Post-Authorisation (Week 22+)

When the case officer is satisfied that the firm meets all threshold conditions, the application is escalated for a decision. For straightforward applications, this decision is made under delegated authority by senior staff within the Authorisations Division. For complex or borderline applications, the decision may be referred to the Regulatory Decisions Committee (RDC), which adds additional time but is relatively rare for first-time authorisation applications.

If the decision is positive, the firm receives a formal notice of authorisation specifying the regulated activities it is permitted to carry out, any limitations or requirements attached to its permissions, and the date from which it may commence regulated business. The firm is simultaneously entered on the Financial Services Register, which is the public record of all FCA-authorised firms and individuals.

Post-authorisation, the firm must immediately comply with all applicable FCA rules, including regulatory reporting requirements (typically Gabriel submissions), capital adequacy maintenance, and ongoing SMCR obligations. The FCA also conducts early-stage supervisory engagement with newly authorised firms, usually within the first twelve months, to verify that the firm is operating in accordance with its application and that its regulatory arrangements are functioning in practice. Firms that treat authorisation as the finish line rather than the starting line often find this early supervisory engagement uncomfortable.

What Causes Delays and How to Avoid Them

The single most common cause of delay is submitting an incomplete application. The FCA's own data shows that approximately forty percent of applications are returned or subject to immediate information requests because basic required information is missing. This is not a matter of complex regulatory judgment; it is a matter of failing to answer every question in Connect, failing to attach every required document, or failing to ensure that individual applications for senior managers are submitted alongside the firm application. The solution is unglamorous but effective: use the FCA's published application pack as a checklist, verify every attachment before submission, and have a second pair of experienced eyes review the entire application before it is submitted. Firms that engage professional support, whether from compliance consultants or specialist regulatory lawyers, reduce their incomplete application rate to near zero, and the time saved almost always exceeds the cost of that support. Our step-by-step guide on how to get FCA authorised covers the practical mechanics of avoiding these errors.

The second major cause of delay is a poor-quality regulatory business plan. The FCA's expectations for business plans are specific and demanding. The plan must demonstrate not only that the firm's business model is commercially viable but that the firm understands the regulatory risks inherent in its proposed activities and has designed its operations to mitigate those risks. A business plan that reads like a pitch deck, full of market opportunity analysis and revenue projections but light on regulatory substance, will generate detailed information requests that can add eight to twelve weeks to the process. The FCA wants to see client journey maps, detailed descriptions of how advice or products will be delivered, conflict of interest analyses, and evidence that the firm has considered its obligations under the Consumer Duty. The plan should typically run to thirty or forty pages and should be written in clear, specific language rather than marketing prose.

The third and most avoidable cause of delay is slow responses to FCA information requests. When a case officer issues a requirement for further information, the firm typically has twenty-eight days to respond. Many firms treat this as a deadline rather than a target, submitting responses on day twenty-seven or twenty-eight. This approach is counterproductive for two reasons. First, it extends the elapsed time by the full twenty-eight days when the information could often be provided within a week. Second, it creates an impression of disorganisation or reluctance that colours the case officer's view of the entire application. Best practice is to acknowledge the information request within twenty-four hours, provide a realistic timeline for response (ideally seven to fourteen days), and then deliver a comprehensive, well-evidenced response ahead of that timeline. Firms that adopt this approach consistently see shorter assessment periods and fewer follow-up questions.

The firms that move fastest through FCA authorisation are not the ones that rush. They are the ones that invest weeks of preparation to ensure that once the formal process begins, nothing slows it down.

FAQ

Can I speed up the FCA authorisation process?

There is no formal expedited track for FCA authorisation applications. The FCA assesses all applications against the same threshold conditions and within the same statutory framework. However, the practical speed of the process is substantially within the applicant's control. A complete, high-quality application with a well-evidenced regulatory business plan, properly completed individual forms, and all supporting documents attached will move through assessment significantly faster than an application that generates multiple information requests. Firms that respond to case officer queries within seven days rather than twenty-eight can compress the assessment phase by several weeks. Preparation is the only legitimate accelerant.

What happens if my application is rejected?

If the FCA proposes to refuse an application, it must issue a Warning Notice setting out the reasons for the proposed refusal and giving the firm an opportunity to make representations. If, after considering those representations, the FCA maintains its position, it issues a Decision Notice. The firm then has the right to refer the matter to the Upper Tribunal (Tax and Chancery Chamber), which can review the FCA's decision afresh. In practice, outright refusals are relatively rare. More commonly, the FCA will engage with the applicant during the assessment process to address concerns, and firms that cannot meet threshold conditions are often encouraged to withdraw their application voluntarily rather than face a formal refusal, which would be recorded on the Financial Services Register.

How long does a variation of permission take?

A variation of permission (VoP) application follows the same statutory framework as a new authorisation, with the FCA having up to six months to determine the application. In practice, VoP applications for established firms with a good regulatory track record are often determined within two to four months. The process is typically faster because the firm has already demonstrated that it meets the core threshold conditions and the FCA's assessment focuses primarily on whether the firm has adequate resources and arrangements for the additional activities it wishes to undertake. However, if the variation involves a significant expansion in scope, such as moving from advisory to discretionary permissions, the assessment can be as thorough as a new application.

Take the Complexity Out of Your Authorisation Timeline

The difference between a smooth three-month authorisation and a frustrating twelve-month ordeal is almost entirely determined by the quality of preparation before the application is submitted. At MEMA, our regulatory team brings direct experience of the FCA's assessment process, having guided firms across financial advisory, wealth management, fintech, and payment services through authorisation successfully. We know what case officers look for, where applications typically stall, and how to build regulatory infrastructure that satisfies the threshold conditions on first review. If you are considering FCA authorisation and want to ensure your timeline stays measured in weeks rather than seasons, explore our FCA Authorisation service or read our detailed costs breakdown for 2026 to understand the full investment required.