If you run a UK financial firm – or you are applying for permission to become one – you will hear the letters “FCA” in almost every conversation. But what is the FCA actually, and what does it mean to be regulated by it?
This guide answers that question in plain English. No jargon, no acronym soup. Just a clear explanation of who the Financial Conduct Authority is, what it regulates, how it works, and what being an FCA-regulated firm actually demands of you day to day.
What is the FCA?
The FCA – short for the Financial Conduct Authority – is the UK regulator responsible for the conduct of financial services firms. Its job is to make sure that the firms it authorises treat their customers fairly, compete honestly, and keep the financial system safe from misconduct.
It is one of the UK’s financial regulators, alongside the Prudential Regulation Authority (PRA), which focuses on the financial safety of large banks and insurers. The two work closely together, but their remits are different. The PRA asks “is this firm financially sound?” The FCA asks “is this firm behaving properly?”
The FCA is an independent public body, funded by the fees it charges the firms it regulates rather than by taxpayers. That matters: it is not a government department, but it reports to the Treasury and is accountable to Parliament.
What does the FCA regulate?
The FCA regulates the conduct of roughly 40,000 firms and many thousands of individuals across the UK financial sector. If your firm does any of the following, you are almost certainly within its scope:
- Payment services and electronic money (e-money) firms
- Mortgage brokers and mortgage lenders
- Investment advisers (IFAs) and wealth and investment managers
- Consumer credit and debt businesses
- General insurance brokers and intermediaries
- Claims management firms
- Cryptoasset firms and virtual asset service providers (VASPs)
- Platforms, fund managers and other collective investment businesses
It also regulates the individuals who hold certain senior roles inside those firms – the Senior Managers and Certification Regime (SMCR) sits here – and it supervises how firms market and sell financial products to consumers.
What is the FCA’s statutory objective?
The FCA has one strategic objective – ensuring that relevant markets function well – and three operational objectives that shape everything it does:
- Consumer protection. Securing an appropriate degree of protection for consumers.
- Integrity. Protecting and enhancing the integrity of the UK financial system.
- Competition. Promoting effective competition in the interests of consumers.
Almost every rule the FCA writes, and every enforcement action it takes, can be traced back to one of those three. Once you understand them, its decisions stop feeling random.
What does it mean to be an FCA-regulated firm?
Being “FCA-regulated” is not a badge you collect and forget. It is a set of ongoing obligations. At a minimum, an authorised firm must:
1. Apply for and hold the right permissions
Before you can carry on a regulated activity, you must be authorised. That means an application to the FCA, a credible business plan, documented policies and procedures, and evidence that you meet the threshold conditions – the minimum standards every firm must satisfy to be and stay authorised.
For many applicant firms the hardest part is not the form-filling, it is building a real compliance framework that will pass scrutiny. See our FCA Authorisation Services for how that is handled end to end.
2. Meet the threshold conditions
The threshold conditions cover your legal status, your location and close links, your suitability, your business model, and your financial and non-financial resources. Fail them and your application stalls; lose them later and your authorisation can be withdrawn.
3. Comply with the FCA’s rules and principles
The FCA Handbook sets out the detailed rules. Underpinning them are the Principles for Businesses – eleven high-level statements, the most famous being Principle 6 (“a firm must pay due regard to the interests of its customers and treat them fairly”). After the Consumer Duty, that principle has become far more concrete: firms must now evidence that they deliver good outcomes for retail customers across products, price, service and communications.
4. Maintain systems, controls and governance
Minimal viable compliance means a business-wide risk assessment, an up-to-date compliance monitoring programme, financial crime controls including AML and CTF checks, accurate regulatory reporting, and a governance structure with clear accountability. Under SMCR, senior individuals must be named, approved and certified for their roles.
5. Report to the FCA and respond to it
Firms must notify the FCA of significant events, submit regular returns, and reply to queries promptly and accurately. How you respond to an FCA query – clarity, evidence, structure – often shapes how much supervisory attention you attract thereafter.
6. Keep up with change
The rulebook moves. Recent years alone brought the Consumer Duty, a refreshed AML regime, changes to how vulnerable customers must be treated, and continuing reform of the UK’s financial services framework. Staying static is not an option.
Who does the FCA supervise, and how?
The FCA takes a risk-based approach. It does not inspect every firm every year. Instead it directs its resources at the areas and firms with the greatest potential for harm, using a mix of:
- Periodic returns and data analysis
- Thematic reviews across a whole sector
- Supervision of individual firms
- Enforcement action – fines, bans, restrictions – where rules are breached
It also maintains the Financial Services Register, the public record of which firms and individuals are authorised. Customers, counterparties and your own due diligence checks all rely on it.
What happens if a firm gets it wrong?
Consequences scale with the seriousness of the breach and the firm’s conduct when it is identified. They range from feedback letters and remedial requirements, through restrictions on business, to substantial fines and public censure. For individuals, they can include bans from working in financial services and the clawback of remuneration.
Two factors consistently make things worse: poor record-keeping, and slow or evasive responses to the regulator. Two consistently help: evidence that you identified issues yourself, and a credible plan to fix them.
How this affects small firms specifically
If you are a two- to fifty-person firm, the FCA’s expectations do not shrink just because your headcount is small. The rules are scaled by activity and risk, not by size. That is why so many owners, directors and COOs end up wearing the compliance hat themselves – and why an outside specialist is often the difference between a clean audit and a stressful one.
Common questions about the FCA
Is the FCA the same as the Bank of England? No. The Bank of England owns the wider regulatory landscape, and the PRA – part of the Bank – supervises prudence for large firms. The FCA is a separate, independent conduct regulator.
Do I need FCA authorisation to start trading? Yes, if you carry on a regulated activity in the UK. Trading without it is a criminal offence.
How long does authorisation take? It varies by sector and the completeness of your application, and the FCA publishes expected timeframes. An application that arrives complete and evidenced moves far faster than one it has to send back.
What is the FCA register used for? It is the public proof of authorisation. Customers check it, and so should you when onboarding partners.
The bottom line
The FCA is the UK’s conduct regulator for financial services – the body that decides who can operate, sets the rules they must follow, and holds them to it. For a small firm, being FCA-regulated means holding the right permissions, meeting the threshold conditions, running real systems and controls, reporting honestly, and keeping up as the rulebook evolves.
That is a lot to carry, particularly without a dedicated compliance function. The good news is that none of it has to be guesswork.
If you would like a clear view of where your firm stands and what needs attention first, speak to a compliance expert or explore our compliance consultancy and audit and benchmarking services. We help UK financial firms get authorised, stay compliant and evidence it – without drowning in paperwork.
