If you run an FCA-regulated firm in the UK, you hear the three letters constantly. Colleagues talk about “FCA rules”, lenders ask about your “FCA status”, and every consultant seems to promise FCA compliance. But step back, and many owners, principals and compliance officers find themselves asking a more basic question: what exactly is the FCA?
This guide answers it in plain English. We explain what the Financial Conduct Authority is, what it regulates, which UK firms must be authorised or registered, and what the FCA’s remit means for your daily operations.
What is the FCA?
The Financial Conduct Authority (FCA) is the independent regulator for financial services firms in the United Kingdom. It was created in 2013, replacing the Financial Services Authority (FSA), and it operates independently of the UK Government while reporting to Parliament.
The FCA has three statutory objectives:
- To protect consumers.
- To protect and enhance the integrity of the UK financial system.
- To promote effective competition in the interests of consumers.
In practice, this means the FCA authorises and supervises firms, sets conduct rules, investigates breaches, and can apply heavy penalties where firms fall short of the standard.
The “what is a fca” question slips into a definitional corner, but the practical answer matters for every firm: the FCA is the gatekeeper between you and lawful trading in regulated financial services. Almost nothing about UK compliance makes sense without that starting point.
What does the FCA regulate?
The FCA regulates the conduct of more than 40,000 firms across the UK. Its remit covers:
- Banking, for conduct and consumer protection.
- Insurance, including general insurance and life insurance.
- Mortgages and mortgage broking.
- Investment and wealth management, including IFAs.
- Payment services and e-money.
- Consumer credit and claims management.
- Cryptoasset firms and VASPs.
For most firms there is a further distinction you need to know: being FCA-authorised (for regulated activities that require full permission) versus being FCA-registered (for lighter-touch roles such as appointed representatives or EEA firms using the temporary permissions regime).
Authorised vs registered
An authorised firm holds a permission to carry out specific regulated activities – such as advising on investments or arranging a insurance product. A registered firm is on the FCA’s Financial Services Register but does not hold the full set of permissions. Which route you take depends entirely on the activities you perform and the exemptions you rely on.
You can check and confirm a firm’s status on the FCA Financial Services Register, which is the regulator’s public directory of every authorised and registered entity in the UK.
Why do UK firms need to be FCA-authorised?
In the UK, carrying on a regulated activity without authorisation (or registration) is a criminal offence. The FCA can prosecute unregulated trading, order firms to stop, and impose unlimited penalties.
For an owner, the stakes are real: you cannot lawfully sign clients, hold client money, sell products, or advise on regulated products without the right permission in place. The requirement is not optional – it is the legal price of entry.
That is why, when firms prepare an application, most find the FCA’s documentation weight – the Regulatory Business Plan, financial projections, fitness and propriety assessment, and compliance monitoring programme – is far heavies than it first appears.
How does the FCA affect your firm day to day?
Even after you are authorised, the FCA’s shadow stays over daily operations. The most concrete examples:
- Conduct of Business rules. Rules govern how you approach, advise, and treat customers, from disclosure to product suitability.
- Consumer Duty. Since July 2023, firms owe a duty to act in the customer’s best interests, review products against the price and value, and evidence their compliance with a monitoring framework.
- SMCR obligations. The Senior Managers and Certification Regime expects named individuals to be accountable for their areas of responsibility.
- AML and financial crime. FCA-authorised firms must run business-wide risk assessments, apply customer due diligence, and report to their MLRO and SARs.
- Reporting and queries. The FCA can ask detailed questions of your governance, business model, risk controls, and financial resilience at any time.
None of this stops when you receive authorisation. In fact, the ongoing obligations are where firms most often stumble, because compliance monitoring is a continuing, not a one-off, task.
Starting point: the FCA Consumer Duty
Consumer Duty deserves a special mention because it is now the backbone of the FCA’s expectations for firms that serve retail customers.
Under the Duty, the FCA expects four outcomes: fair value, understanding new customers, products fit for purpose, and a culture that puts consumers first. To prove this, firms need a heatmap of the products, services, and channels, and evidence that your pricing, distribution, and monitoring genuinely deliver good outcomes.
How to authorise or register your firm
If your firm carries on a regulated activity without the right permission, your first stop is to authorisation. The process involves:
- Deciding the exact regulated activities and then permissions you need.
- Submitting your application through FCA Connect.
- Supplying a Regulatory Business Plan and financial projections.
- Passing the senior management checks and fitness and propriety assessments.
- Building a working compliance monitoring programme.
Many firms do this themselves, but good preparation is the difference between a smooth application and months of FCA queries. That is where a dedicated FCA authorisation service, delivered by specialists who know the application from start to finish, can save you real time and reduce the risk of refusal.
Maintain, don’t just obtain, your permission
Once authorised, most firms stop and assume the hard part is done. The FCA expects exactly the opposite: supervision is continuous. You need a compliance monitoring programme, regular benchmarking, and a way to show the FCA you are meeting their expectations if they ask.
An FCA compliance audit reviews your governance, controls, and processes against the handbook, gives you a written report with risk ratings, and highlights the urgent fixes before the regulator does. It is one of the most effective ways to stay ahead.
Getting expert support
Even the most capable owner is often one person carrying the whole compliance function. If you are not a specialist yourself, or you simply want to set regulatory risk aside and get back to business, done the targeted support you need.
We specialise in FCA compliance for UK regulated firms. We can handle an FCA application end to end, run a compliance audit, provide regulatory training, or act as your retained compliance department on a monthly retainer. Whatever your firm’s size and sector, the goal is the same: lawful trading with confidence.
SPEAK TO A COMPLIANCE EXPERT and find out how we can help you meet the FCA’s expectations with practical, direct, plain-English support.
