FCA authorisation for new firms
Get the structure right first.
Work out whether you need FCA authorisation, what permissions to apply for, and how to build an application that gets approved.

Do you need FCA authorisation?
We work with founders, and the investors and boards behind them, from the first perimeter question through to the day the permission is granted.
- You're launching a product or service that may be regulated
- An investor, bank or partner requires you to be FCA authorised
- You're unsure which permissions your business model needs
What has to be true before you apply
What must be true before you apply
Most obligations land on the firm. These land on the individual holding the function.
FSMA s.19
The general prohibition applies before you have a customer
No person may carry on a regulated activity in the UK unless authorised or exempt. It bites on the activity, not on whether anyone has been harmed, paid you, or complained — and marketing a regulated product counts.
FSMA s.23
Breaching it is a criminal offence
Up to two years' imprisonment and an unlimited fine. This is the one item on this page that can end in a prosecution rather than a supervisory conversation, and 'we were about to apply' is not a defence.
FSMA s.26
Contracts written in breach are unenforceable
Agreements made in breach of the general prohibition cannot be enforced by you, and the customer can recover any money paid. Trading early does not just risk a penalty; it can unwind the revenue it was meant to generate.
COND 2.1
Threshold conditions are continuous, not a gate
You have to meet them to be authorised and keep meeting them afterwards. Firms plan for the application and treat approval as the finish line; the conditions govern the whole life of the permission.
FSMA s.55V
The clock starts when the application is complete, not when you send it
Six months for a straightforward complete application, twelve for a more complex one. An incomplete submission does not start the clock at all, so every round of supplementary questions is time added to the end, not spent within the window.
What the FCA expects to see in an application
Having the artefact is rarely the issue. These are the qualities that survive challenge.
Perimeter analysisPERG / the RAO
A written view of which activities you carry on and why each is or is not regulated, reached before you build. Assuming an exclusion applies is where most perimeter breaches begin, and the analysis is cheaper than the wrong answer.
Regulatory business plan
The business you will actually run, described so a case officer can see how money moves and where the customer risk sits. A plan that reads like a pitch deck invites questions; a plan that reads like an operating manual answers them.
Threshold conditions evidenceCOND 2.1
Each condition addressed on its own terms with evidence attached, rather than asserted in prose. Location, effective supervision, resources, suitability and business model are separate tests and are assessed separately.
Financials and capital
Projections that reconcile to the business plan, with the capital requirement calculated for the permissions you are asking for — not the ones you might want later. Stress the downside case; the FCA will.
SMF appointments
Named individuals with the relevant experience, their Statements of Responsibilities drafted, and fitness and propriety evidenced. An application where external consultants are the only compliance resource will probably be refused.
A complete first submissionFSMA s.55V
Completeness is the single biggest lever on timing you control. The determination clock does not start until the application is deemed complete, so front-loading the work is not diligence for its own sake — it is the difference between six months and considerably longer.
FCA authorisation support for new firms
See the Get Authorised process- Perimeter and permissions scoping against the RAO and PERG
- Regulatory business plan, financials and threshold-conditions evidence
- SMF appointments, Statements of Responsibilities and F&P
- End-to-end application management and FCA liaison
Questions founders ask us
Can we begin trading before authorisation comes through?
No. Carrying on a regulated activity without authorisation is a criminal offence under section 23 FSMA, punishable by up to two years' imprisonment and an unlimited fine. That includes marketing regulated products or services, not just transacting. The only exception is where an exemption or exclusion genuinely takes the activity outside the perimeter — and you should take perimeter guidance before assuming one applies.
How long does FCA authorisation take?
The statutory periods are six months for a complete straightforward application and twelve months for a more complex one, under section 55V FSMA. The important detail is that the clock only starts once the application is deemed complete. Incomplete applications are the main source of delay, and multiple rounds of supplementary questions extend the timetable rather than running inside it.
What happens if the application is refused?
You can apply again at any time, but a new application has to address the reasons for the refusal — the FCA expects material change, not revised paperwork. In practice most firms that receive a 'minded to refuse' notice withdraw instead, because a withdrawal is not published and a refusal is. That distinction matters for future applications and for banking and investor relationships.
For the full detail, read FCA authorisation preparation: the full explainer.
Talk to a regulatory specialist
Book a scoping call to discuss your situation and the right next step.