Business scope and permission boundaries
Applies to lower-risk activities meeting specified conditions, such as suppliers’ own lending, some ancillary broking and consumer hire. Limited permission conditions for supplier lending include principally selling goods or non-financial services, charging no interest or fees, and not involving HP or conditional sale. Whether an agreement exemption can apply in full must also be assessed first.[1] [18]
Application value and choice of route
Select the minimum sufficient combination of permissions that lawfully supports the actual business, client scope and financial responsibilities, rather than treating the broadest permissions or fastest approval as the sole objective.
Accurately matching business permissions enables a firm to lawfully provide its proposed lending or broking services and avoid misusing limited permission as authorisation for specialist lending. The scope and restrictions of FCA authorisation can be checked on the public register, enabling partner merchants and funding providers to verify the applicant's actual regulatory status; authorisation does not guarantee partnerships, profitability or a bank account.[1] [2]
Creditworthiness and affordability assessments, clear disclosures and support for customers in difficulty in regulated credit establish repeatable consumer protection processes for firms. In 2026, regulated DPC customers also gain access to the applicable FOS complaints channel, but this is not equivalent to deposit protection or FSCS compensation cover.[3] [4] [5]
Establishing governance, financial forecasting and data reporting systems suited to products and risks helps identify historical sales, charging or collection issues during growth and acquisitions. Ren Gang Yong Sheng may assist, as agreed, with business classification, preparation of materials and organisation of regulatory enquiries, but should not promise a fixed approval date, a one hundred per cent success rate or replacement of board responsibilities.[2] [12]
Application conditions and entry requirements
Firms should demonstrate that their activities meet the specific restrictions of the limited permission. Reducing turnover or describing professional lending as a sideline cannot achieve the same conclusion. Compliance documentation may be proportionate to risk, but applicable Consumer Duty, complaints and other obligations cannot be omitted because of the word 'limited'.[1] [12] [14]
Shareholders, directors and key personnel
Shareholders and controllers: disclose direct and indirect ownership, voting rights, group relationships and persons able to exercise significant influence, and explain the source of investment funds and group financial support. A firm holding only full consumer credit permission is generally a non-Directive firm, with a controller threshold of 20% or more; a limited-permission consumer credit firm uses a single 33% threshold. Significant influence, holdings at parent company level and other concurrent permissions may still alter the conclusion; not all 10% shareholders can uniformly be described as consumer credit controllers requiring approval.[6] [12]
Directors and senior management: individuals must be honest, have relevant business knowledge and participate actively in management. Identify the SMFs requiring prior approval and the corresponding statements of responsibilities according to the Core, Enhanced or Limited Scope classification under SM&CR. Consumer credit Full Permission does not mean that every firm must have all of SMF1, SMF3, SMF16 and SMF17. Limited Permission and Limited Scope under SM&CR must not be treated as identical concepts either. Current FCA guidance includes that a sole trader with no employees generally does not need to hold SMF29, while a three-year rolling average of regulated revenue from consumer credit lending reaching £130 million is one trigger for Enhanced classification.[11]
Compliance and anti-money laundering: identify who oversees CONC, Consumer Duty, complaints and financial crime controls, and give that person sufficient time, authority and direct escalation channels. Whether an approved SMF16 or SMF17 is mandatory depends on the activities, legal entity and applicable SYSC rules; not every firm must employ a separate full-time MLRO. The certification regime covers relevant functions defined by the rules, rather than requiring certification of every customer-facing employee. Directors and management cannot delegate their responsibilities to advisers.[10] [11] [12]
Local substance: a UK-incorporated legal person should maintain genuine principal management and control arrangements in the UK, and its application must explain board decision-making, compliance oversight, personnel availability and access to records. FCA has not prescribed 'two UK-resident directors' or a fixed local headcount applicable to all entities in this topic. Overseas managers must explain how they perform their duties remotely without undermining effective supervision. Group outsourcing, overseas shareholders and applications by overseas companies should be assessed case by case; a UK subsidiary or UK residence for all senior managers must not be presented as the sole structure universally applicable.[2] [18]
Capital and financial resources
There is no uniform fixed minimum capital amount for this route, but proportionate financial and operational resources are required. £560 is the current Category 2 application fee, not minimum capital, and annual fees are not fixed at £250.[1] [16]
Registered office and operational substance
The registered office, principal business address and place of effective management must be accurately disclosed. They may differ, but a mail-forwarding address alone does not demonstrate effective operations or supervisory accessibility. UK-registered legal persons must explain their UK effective management, customer support, recordkeeping and regulatory access arrangements, including overseas personnel or systems. FCA assesses the legal entity, activities and individual arrangements; there is no uniform office-size requirement or requirement to rent a London office for this topic.[2] [12] [18]
Ren Gang Yong Sheng’s Hong Kong or Shenzhen addresses are consultancy contact details and cannot substitute for evidence of a UK applicant’s local substance. uk-fca.com may clearly identify the consultancy brand and Tang Shangyong (Mr Tang), but must not conflate a consultancy address, a FCA office address or a virtual UK address with a client’s accepted regulated business premises. Public information and post-authorisation updates should be consistent with the actual company information in Connect and the register.
Application document checklist
Legal entity and ownership information: provide registration certificates, articles or partnership documents, a group structure chart and direct and indirect ownership information. Submit core details, controller or trust controller forms as required by Connect, together with applicable owners and influencers, significant events and sole trader supplements. Do not impose a Ltd certificate-of-incorporation checklist on every entity.[12]
Regulatory business plan: explain each proposed activity, contract type, target market, customer acquisition channel, relationship with merchants and funders, and charging model. The plan must explain why the permissions cover the actual fund flows and customer journeys, rather than merely submitting generic market analysis or promising to build systems later.[1] [12]
Financial forecasts and funding evidence: submit profit and loss, balance sheet and cash flow forecasts appropriate to the business, stating assumptions for lending funds, bad debts, complaint compensation, operating and wind-down budgets. Existing businesses should provide relevant actual financial information, with verifiable evidence of shareholder capital injections, loans and parent company support. The statement that ‘all applicants must have three years of audited history’ does not apply to newly established businesses.[2] [12]
Product and contract materials: prepare credit or hire agreements, pre-contract disclosures, rate and fee schedules, repayment arrangements, and refund and default notice templates. DPC must specifically address merchant returns, suspension of repayments or balance adjustments for refunds, per-transaction assessments, and how new and old agreements are managed separately.[5] [12]
Credit and customers in financial difficulty policies: submit policies on credit risk, affordability, arrears, forbearance and vulnerable customers, including approval authorities and manual review mechanisms. Policies should demonstrate how multiple loans to the same customer, changes in income and limited credit histories are handled, rather than merely stating “use third-party scoring”.[5] [12]
Consumer Duty and complaints materials: provide plans for the target market, value assessment, communication testing, consumer support and outcome monitoring. The complaints policy must include investigation, root cause analysis, applicable response deadlines and notification of FOS, and explain how the board reviews outcomes and drives remediation.[12] [14] [19]
Governance and individual applications: submit Form A, statements of responsibilities, curricula vitae, relevant experience, criminal record checks and necessary disclosures according to applicable functions. Whether a particular individual check or approval is required must be confirmed against the entity and role. A sole trader with no employees must not mechanically be required to provide all director and certification documentation.[11] [12]
Financial crime and data documents: prepare risk assessments, identity and fraud controls, sanctions screening, suspicious activity escalation and applicable MLR procedures. The scope of lending activities and exclusions under MLR 2017 must be assessed specifically; credit broking or all short-term instalment arrangements must not automatically be classified as the same type of institution for anti-money laundering purposes.[10] [12]
Systems and third-party materials: complete the applicable IT self-assessment questionnaire and submit technology, cyber security, business continuity and outsourcing policies. Explain contracts, access rights, monitoring and replacement arrangements for merchants, loan management systems, credit data and collection suppliers. Where appointing AR is proposed, also submit its onboarding and monitoring procedures.[12]
Debt management-specific materials: provide debt advice and solution processes, fee and ongoing suitability policies, a wind-down plan, and client money and capital calculations. Collection firms should instead submit policies on disputed debts, statute-barred debts, litigation and enforcement. The same generic ‘debt management template’ cannot replace materials for different permissions.[7] [12]
This is provided as a reference for organising the project; it cannot replace current official application forms or case-specific requests for additional materials. Please do not send identity documents or customer records through website forms.
Application process and key steps
First, determine the regulatory perimeter by reference to customers, contracts and lender–supplier relationships, and identify limited permission, full permission or a clear activity exemption. For BNPL projects, first distinguish DPC from other deferred interest-bearing credit, then verify whether the firm already has sufficient consumer credit permissions. The legal basis for any exemption analysis should be documented; the route must not be determined solely by marketing names.[1] [3] [5]
Second, establish the actual operating structure, management and financing arrangements, and complete approved business plans, systems and compliance policies. Complex or innovative projects may use the FCA pre-application support channel to discuss issues, but its views are neither formal authorisation nor a guarantee of approval. Readiness means that, if authorised today, the company could operate compliantly from the effective date.[2] [5] [12]
Third, submit the firm application, required individual applications and supporting documents through Connect, and pay the non-refundable application fee. The 2026-11-07 FCA fees page lists limited permission as Category 2, namely £560. Full permission falls under Category 3, 5 or 6, namely £1,130, £5,640 or £11,260, selected according to the proposed activities. Mainstream lending, motor finance and retail finance are normally Category 5, while high-cost lending is normally Category 6. Specific fee exceptions exist for not-for-profit debt advice and community finance organisations.[1] [16]
Step four: FCA assigns a case officer, checks minimum standards, the business model, personnel and other regulators' records, and may raise supplementary questions or conduct interviews. Applicants should respond fully by the expressly requested dates and maintain consistency across descriptions of products, permissions, financial assumptions and personnel. Where major changes indicate a lack of readiness, FCA may require withdrawal and resubmission rather than guarantee completion of restructuring within the original timeframe.[2]
Step five: the regulator makes its decision and issues written notice specifying permissions, the effective date, restrictions and additional requirements. Approved firms enter the public register and receive FRN. Business may be conducted only within the approved scope and from the effective date; acceptance of an application or payment of a fee does not permit lending in advance. Projects without an applicable exemption or temporary permission must not conduct regulated activities during assessment.[2]
Step six: following approval, check the register, set up RegData and a specific reporting calendar, and assign responsibility for fees and monitoring customer outcomes. Firms with DPC temporary permission must also complete their applications during the formal application window of six months immediately following the regulation date, or lose temporary permission. Temporary permission is not full authorisation, and partial reporting exemptions during transition do not exempt firms from responsibilities to consumers or complaints handling.[3] [5] [13]
Approval deadlines and project timelines
Statutory decision time limits: consumer credit Part 4A applications are subject to section 55V of FSMA, under which the regulator must determine an application within six months of receiving a complete application. An incomplete application must in any event be determined within twelve months of its initial receipt; the six-month period once the application becomes complete must also be considered alongside that overall limit. This does not mean ‘six months for limited permission and twelve months for full permission’, nor does it guarantee approval once the time limit is reached.[2] [15]
Preparation time: FCA specifies no uniform statutory completion period for recruitment, financing, systems development or application preparation. For project budgeting, simpler arrangements with an existing business foundation may initially allow around three to six months for preparation; complex lending or DPC projects may take longer. This is only a consulting planning estimate, not an official average or promise of approval. Preparation and formal assessment periods should be shown separately; estimated months across several stages must not be added together and described as a statutory regulatory deadline.[2] [12]
BNPL status: regulation of third-party DPC took effect on 2026-07-15, and FCA now expressly states that TPR registration has closed. Firms already holding relevant permissions or valid TPR may provide new DPC subject to conditions; new entrants must now obtain consumer credit lending authorisation first. DPC entered into before 2026-07-15 that qualified for the old exemption remain exempt and do not retrospectively become regulated agreements on commencement. Firms admitted to TPR must comply with the formal application window in the six months following regulation and determine their specific submission deadline from their FCA notice and Directions.[3] [4] [5]
Changes to shareholders, directors and permissions
Control: pure consumer credit firms with full permission generally have a single 20% control threshold, while limited-permission firms have 33%. Voting rights, parent company holdings and significant influence must also be considered. A proposed acquisition of control or attainment of a control threshold requires the FCA control procedure before the transaction; reducing or ceasing control also entails notification requirements. Changes within the same control band generally do not trigger the procedure again solely because the percentage changes, but other conditions must still be checked. Entities also holding banking, MiFID or other permissions cannot simply apply pure consumer credit thresholds.[6]
Directors and SMF: proposed appointees performing a Senior Management Function requiring approval should obtain the applicable approval before taking up their duties. Departures and changes in responsibilities must be handled under the relevant individual forms and notification rules. Ordinary director appointments and removals, Companies House registration, SMF approval and internal firm certification are separate processes; Form C must not be described as a controller application form. Adding or changing regulated activities or permission restrictions requires an application for Variation of Permission, rather than using personnel change notifications to expand business scope.[2] [11] [12]
Business and TPR changes: material changes to loan types, distribution channels, outsourcing, funding structures or customer service should be assessed for their impact on threshold conditions and consumer outcomes, with timely notification under rules such as SUP. Although firms holding only DPC interim permission have some Handbook and SM&CR transitional arrangements, they must still explain material business model, ownership or address changes to FCA. A sale of company shares does not transfer permissions to another legal entity. Transfers of assets or agreements require separate checks of the transferee's permissions, contractual rights and customer notifications.[2] [5]
Ongoing compliance and annual maintenance
Use the limited permission returns scheduled through RegData and the applicable CCR009, and continually check whether new products exceed permissions. If the business moves into specialist lending, introduces interest-bearing contracts or undertakes other ineligible activities, changes to permissions should be addressed before those activities begin.[1] [13]
Acquisition due diligence and transaction considerations
Permissions and contractual due diligence: check the target firm's register entry, formal permissions, restrictions and outstanding VoP and FCA requirements, confirming individually whether lending, leasing, broking or debt activities are covered. Check whether agreements were lawfully formed, pre-contract disclosures and notices are correct, the chain of assignment is complete, and there are disputes or limitation issues in collections. Buying shares and buying loan assets follow different regulatory routes; consumer credit authorisation cannot be transferred directly like an asset.[2] [6] [12]
Historical product risks: conduct retrospective sampling of affordability assessments, repeat borrowing, charges, treatment of customers in difficulty, FOS decisions and historical redress, and reassess loan assets and compensation provisions. For motor finance, focus on discretionary commission arrangements, commission disclosure, sales relationships and the impact of PS26/3. As at 2026-11-07, parts of the redress scheme are paused, with the legal challenge officially scheduled to be heard from 2027-02-16 to 26; calculation and payment obligations are temporarily not proceeding under the original timetable. Applicable rules must still be followed, preparations continued, and the operational and financial needs of resuming normal complaints handling if the scheme is quashed assessed. Old estimated redress figures must not be treated as definite liabilities of the target company.[21]
Dedicated BNPL due diligence: establish whether the target has full authorisation or TPR, whether it provides new DPC within its permitted scope, and whether agreements before and after 2026-07-15 are correctly categorised. Check merchant refunds, contract cancellation, credit reporting, late fees, PSD data completeness and consumer support, as well as the progress of temporary permission firms' full applications and lapse risks. If the target still relies on the proposition that “all interest-free twelve-instalment arrangements are unregulated” or extends the DPC broking exemption to ordinary interest-bearing loans, assess the costs of stopping new business, obtaining additional authorisation and customer remediation before the transaction.[3] [5]
Resources and completion arrangements: verify whether loan financing, parent guarantees and merchant partnerships contain change-of-control termination clauses, and check whether debt management client funds are mixed with company operating funds. Conditions precedent to completion should include the necessary control approvals, key SMF arrangements, availability of funds and data access, rather than treating the transfer of Companies House alone as completion. Ren Gang Yong Sheng may coordinate the compilation of due diligence findings; valuation, contractual enforceability and litigation exposure should still be confirmed case by case by the relevant professionals.[6] [7] [12]
View the complete process for acquiring a licensed companyBusiness segments and applicable regimes
The following are specific permissions, organisational models or statutory categories covered by this topic. They do not necessarily each constitute a separate financial licence.
Frequently asked questions
Is there a generic CC licence covering all UK consumer credit activities?+
There is no general permission that automatically covers all activities under the name ‘CC’. FCA grants approval according to the activities, limitations and requirements listed in Part 4A. Lending, broking, leasing and debt activities must each be matched to the appropriate permissions. Limited permission and full permission are not freely selectable market positions.[1]
Is 2026-11 BNPL still only proposed for regulation?+
No. Regulation of third-party DPC began on 2026-07-15, and FCA now states that TPR registration is closed. Only those already holding the applicable permission or a valid TPR may enter into new agreements within scope. New entrants must now first obtain consumer credit lending authorisation.[3] [4]
Do all interest-free instalment arrangements within twelve months require authorisation?+
No. Merchant-provided DPC, third-party DPC and specific financing exceptions must be distinguished. Third-party interest-free twelve-instalment products may already be regulated. The pre-reform conclusion that all short-term interest-free arrangements are exempt cannot continue to be applied.[3] [5]
Does merely introducing regulated DPC at checkout require becoming a credit broker?+
DPC broking is now excluded from this broking regulatory perimeter, including the circumstances involving merchants visiting customers' homes discussed during this reform. If other regulated interest-bearing products are also introduced or another type of activity is conducted, a separate permissions analysis is required; the DPC exemption does not mean an exemption for all credit broking.[3] [5]
Will BNPL agreements entered into before the implementation date automatically become regulated?+
Agreements entered into before 2026-07-15 that qualify for the former DPC exemption remain exempt, and lenders may continue servicing those existing agreements. This does not mean that new transactions with the same customer after the implementation date are also exempt; contract dates and product types must be managed separately.[3]
Is the minimum capital for an ordinary lender £50,000?+
No. Ordinary non-bank consumer lenders have no uniform £50,000 minimum capital amount. FCA assesses appropriate resources proportionate to business risks. Lending funds and budgets for operations, bad debts, customer redress and exit must still be credible. Firms also holding banking or other permissions cannot rely on this conclusion that there is no fixed amount.[9] [12] [18]
Is the minimum capital for a debt management firm £100,000?+
For firms subject to CONC 10, minimum prudential resources are the higher of £5,000 and a tiered amount based on scale. The tiers are 0.25% of the first £5 million of relevant debts, 0.15% of the next £95 million and 0.05% of the portion exceeding £100 million, not a fixed £100,000.[7] [8]
What is the current FCA limited permission application fee?+
Ordinary limited permission applications fall under Category 2; the official 2026-11-07 fees page lists £560, with separate fee exceptions for certain non-profit and other categories. Full permission falls under Category 3, 5 or 6 depending on the activities. Application fees are calculated separately from annual regulatory fees, capital and consultancy fees.[1] [16]
Is the statutory deadline for a full authorisation application twelve months?+
The statutory decision deadline for a complete consumer credit application is six months from receipt of the complete application; an incomplete application must, in principle, be decided within twelve months of initial receipt. The distinction depends on completeness, not whether the permission is called limited or full, and preparation and systems implementation are additional.[15]
Does buying shares in an 10% always require change-in-control approval from FCA?+
Pure full-permission consumer credit firms generally have a single control threshold of 20%, while limited-permission firms have 33%, rather than a universal 10%. Significant influence, parent company voting rights, indirect control and other concurrent permissions still require review, so being below the numerical threshold does not invariably remove procedural requirements.[6]
Can consumer credit firms accept deposits from the public or provide payment wallets?+
Consumer credit permission does not itself authorise accepting deposits from the public, nor does it replace payment or electronic money authorisation or registration. Banks, credit unions and ordinary non-bank lenders have different regulatory perimeters; the use of funds cannot replace assessment of the relevant regulated activities.[9] [18]
Must all directors, compliance officers and MLRO be UK residents?+
There is no uniform UK-resident headcount requirement applicable to all entities in this topic. FCA focuses on genuine management, competence and effective supervision. Overseas performance of duties requires a credible explanation. Which roles require SMF approval and whether a MLRO must be established should be assessed according to the applicability of SM&CR and SYSC.[2] [10] [11]
Is an affordability assessment unnecessary where DPC is less than £50?+
Applicable credit affordability assessments are still required; PS26/1 expressly include small-value DPC. Risk-based proportionality may allow sufficient existing data to support an individual case, but does not create an exemption under which all amounts below £50 require no assessment.[5]
Is regulated BNPL protected by FSCS?+
No new FSCS compensation protection has been introduced for DPC activities, and they must not be marketed to consumers as equivalent to bank deposit protection. Applicable regulated DPC complaints may be referred to FOS, while FOS dispute adjudication and FSCS compensation for firm failure are different mechanisms.[5]
Must the Consumer Duty annual report be submitted to FCA on day 31 of month 7 every year?+
The rules require the governing body to review and approve the consumer outcomes report and actions at least annually, retaining adequate evidence. Implementation and first-round reporting dates must not be presented as a uniform future deadline for all firms to submit reports externally. Reports must still be provided when separately requested by FCA.[14]
Has motor finance redress in 2026 been fully rolled out according to the original timetable?+
As of the verification date, the scheme is partially paused. FCA states that the legal challenge will be heard from 2027-02-16 to 26, and lenders need not calculate or pay compensation under the scheme until the legal process concludes. Preparations and complaints handling should nevertheless proceed under the rules in force, with an assessment of the resources needed to resume normal complaints handling.[21]
Official basis and verification sources
Primarily based on FCA, PRA / Bank of England, GOV.UK and current legislation. Older third-party guides supplied by users are used to organise business material and do not override the latest official requirements.
Tang Shangyong (Mr Tang / Drew) · Business Manager
Global financial licence application, transaction and ongoing compliance services