BNPL Regulation Support
Deferred Payment Credit is now regulated and the Temporary Permissions Regime has closed. Firms on temporary permission must be fully authorised by January 2027. If you did not register in time, that position can still be put right, and the sooner it is looked at the more options remain. MEMA helps with authorisation applications, perimeter analysis, customer journey review, governance, and firms outside the temporary regime.
The Buy Now Pay Later Regulation journey
The route from scoping your permissions to a decision. The FCA's part of it is fixed; the preparation before it is where applications are won or lost.
Establish where your agreements sit
How your deferred payment credit is structured, and where that leaves you against the perimeter and the temporary permissions position as it stands.
- Analyse the agreement structure and the credit provided
- Confirm your permission or temporary permission status
- Establish the position if the registration window was missed
Build the lending control framework
A lending permission is assessed on the customer journey as much as the paperwork — disclosure, affordability, arrears and forbearance.
- Review the journey end to end against conduct expectations
- Build affordability, arrears and forbearance controls
- Prepare the plan and governance a lender is assessed on
Submit to FCA
Submitted through the FCA's Connect portal with the application fee of £280.
- Complete submission through Connect
- Application fee paid at submission
- Case officer assigned by the FCA
FCA review
The statutory determination period is 6–12 months — six months for a complete application, twelve if it is incomplete when submitted.
- Case officer raises questions on the submission
- Further information requests answered and evidenced
- Weak responses, not complexity, are the common cause of delay
Permission granted
Permission is granted and the firm can carry on the regulated activity, subject to any requirements attached to it.
- Permission recorded on the Financial Services Register
- Any limitations or requirements confirmed
- Reporting and supervision obligations begin
- What applies
- Buy now pay later lending
- Where it sits in the rules
- CONC, deferred payment credit
- FCA determination
- 6–12 months
- FCA application fee
- £280
Statutory period from a complete application
Temporary permission notification. No full-authorisation fee is published yet
What needs clarifying?
Start with the part of the BNPL model that is changing or uncertain.
Perimeter
Separate regulated third-party lending from exclusions.
Permissions
Plan the route and responsible ownership.
Customer journey
Review affordability, disclosures and support.
Implementation
Turn requirements into controls and evidence.
Key Buy Now Pay Later Regulation Requirements
What the FCA expects, and the evidence behind it.
What you will need to produce
- Model and perimeter analysis
- Permissions strategy
- Customer journey and conduct review
- Implementation roadmap and control evidence
Start with the product chain
BNPL readiness depends on how the provider, lender, merchant and customer interact.
Parties and contracts
Map who provides credit, makes decisions, receives fees and communicates with the customer.
Customer journey
Review application, affordability, disclosures, repayment, support and collections.
Perimeter decision
Separate the activity analysis from assumptions about future regulation or product labels.
Prepare practical customer controls
The readiness plan should show how good outcomes will be managed across the chain.
Affordability and support
Assess creditworthiness, customers in difficulty, vulnerability and escalation.
Governance
Set ownership for product, conduct, merchant and lender oversight.
Implementation roadmap
Create actions, owners and evidence for permissions, controls, communications and monitoring.
How MEMA helps
The work here is preparation under a moving target: establishing where the firm sits, then building what will be needed without over-building for rules that are not final.
- 01
Analyse the model
We establish precisely how your agreements are structured and where they sit against the perimeter as it stands.
- 02
Set the permissions strategy
A decision on what to apply for and when, with the reasoning recorded so it can be revisited as the position develops.
- 03
Review the customer journey
The journey is assessed end to end — disclosure, affordability, arrears and forbearance — because that is what conduct expectations attach to.
- 04
Build the control framework
Policies, governance and monitoring built to the standard a lending permission requires, sequenced so nothing is wasted if the detail shifts.
- 05
Run the roadmap
An implementation plan with owners and checkpoints, updated as the regime is finalised rather than rewritten.
The areas we cover
From model analysis to operational readiness
Model Analysis
- Legal structure and lending relationship
- Role of merchants and platforms
- Customer journey mapping
- Allocation of responsibilities
Permissions Strategy
- Scope assessment and perimeter analysis
- Permissions route evaluation
- Full authorisation applications for firms on temporary permission
- Commercially sensible route selection
Operational Build
- Customer communications and disclosures
- Affordability and complaints handling
- Consumer Duty alignment
- Governance, MI, and implementation planning
The Regulatory Position
Where the Deferred Payment Credit regime now stands
January 2027
Full Authorisation Deadline
Deferred Payment Credit became regulated on 15 July 2026 and the Temporary Permissions Regime has closed. Firms holding temporary permission must complete full authorisation by January 2027.
Third Party Lender Models
In Scope
Interest free credit products repayable in twelve or fewer instalments within twelve months, where the lender finances purchases from a merchant.
Merchant Own Credit
Outside Scope
Merchant provided own credit remains outside the new perimeter. Structuring analysis is critical to determine where the regulated risk sits.
Broking Remains Exempt
But Conduct Questions Remain
The FCA has confirmed that broking of Deferred Payment Credit agreements will remain exempt, though wider governance questions can remain relevant.
BNPL Reform Is an Operational Challenge, Not Just a Legal One
Firms that treat this as a narrow classification exercise often discover the real challenge is reshaping the operating model in time.
What Makes MEMA Different
We help clients answer the commercial questions that sit behind the regulation
Related Services
Firms preparing for BNPL regulation may also need
Related FCA Guidance
Deeper reading on the regulatory framework relevant to BNPL providers.
CONC: Consumer Credit Sourcebook
The FCA rules that govern regulated BNPL products, including Deferred Payment Credit.
SectorConsumer Credit Affordability
Affordability assessments BNPL providers are required to conduct.
HandbookPERG: Perimeter Guidance
Understanding where BNPL sits within the evolving regulatory perimeter.
Talk to us about your BNPL position
Whether you are building a full authorisation application, still assessing scope, or dealing with a missed TPR window, tell us where you stand and we will come back to you.
Prefer to talk it through first? Call and you will speak to a consultant, not a switchboard.
Frequently Asked Questions
Select a question to view the answer.
Is BNPL now regulated in the UK?
Yes. Deferred Payment Credit came under FCA regulation on 15 July 2026. The Temporary Permissions Regime registration window has closed, and firms holding temporary permission must secure full authorisation by January 2027.
Will all BNPL models be regulated?
No. The perimeter is more specific than that. The new regime focuses on Deferred Payment Credit provided by third party lenders financing goods or services from merchants. Merchant own credit remains outside scope, so structuring analysis matters.
Will brokers need to be regulated under the new regime?
The FCA has confirmed that the broking of Deferred Payment Credit agreements will remain exempt. Even so, firms should still analyse their role carefully because wider conduct, distribution, and governance questions can remain highly relevant.
What should firms be doing now?
It depends where you stand. Firms on temporary permission should be building the full authorisation application now, because the January 2027 deadline governs a queue, not a submission date. Firms that did not register during the TPR window and are carrying on regulated Deferred Payment Credit activity are operating without permission and need urgent advice on their position. Firms still unsure whether they are in scope should start with a perimeter analysis.
