Business scope and permission boundaries
The platform matches parties to agreements under Article 36H and arranges repayments, collection or enforcement of rights. Individuals may lend to individuals or companies. A corporate borrower does not automatically place the arrangement outside regulation: it may still fall within scope where the lender is an individual or a statutory relevant person. Pure company-to-company arrangements require a separate perimeter assessment.[2]
Application value and choice of route
Select the minimum sufficient combination of permissions that lawfully supports the actual business, client scope and financial responsibilities, rather than treating the broadest permissions or fastest approval as the sole objective.
A compliant platform can establish non-bank financing channels for borrowing businesses and projects, directly connecting funders with financing needs. The platform must clarify whether it acts as an intermediary and service provider or has additional authorised transaction functions, and must not market regulatory authorisation as a guarantee of project safety or returns.[1] [2]
Investment-based crowdfunding can support unlisted businesses in raising finance through equity or debt securities, while POP provides a further compliant route for larger public offers as businesses grow. The final FCA regime focuses on widening financing options and protecting investors, including retail investors, through platform due diligence and disclosure; it does not relieve issuers of responsibility for truthful disclosure.[7]
Eligible P2P loans and crowdfunding bonds may be held within an innovative finance ISA tax wrapper, allowing eligible investors the relevant tax treatment under ISA rules. Operating a platform and acting as an ISA manager are different roles, and the HMRC manager and asset conditions must be met. The tax wrapper does not eliminate default, price decline or liquidity risks.[17]
Application conditions and entry requirements
Apply for the relevant Part 4A permission to operate an electronic system in relation to lending, and establish credit management, disclosure, investor categorisation and appropriateness procedures. If the platform itself becomes a lender or borrower under the agreement or acquires lending rights, its classification must be reassessed; the P2P label cannot cover lending from its own funds.[2] [6]
Shareholders, directors and key personnel
For shareholders, disclose direct and indirect ownership, ultimate controllers, joint control arrangements and sources of funds, and explain why complex offshore structures do not impede supervision. There is no British shareholder nationality requirement applying to all crowdfunding platforms, nor can a 10% holding be treated as the sole assessment threshold for every category. Whether the firm is a MiFID firm and whether significant influence exists affect controller identification and subsequent notification requirements.[4] [11] [12]
Directors and management should have experience appropriate to P2P credit management, investment distribution, issuance due diligence or client money. A job title does not automatically confer regulatory approval. Persons performing applicable senior management functions should obtain individual approval and submit statements of responsibilities. Whether SMF1, SMF3, SMF16 and SMF17 apply depends on the functions and rules. Firms should determine their Enhanced, Core or Limited Scope category under SM&CR, rather than incorrectly describing Limited Scope as Limited Permission for crowdfunding business.[14]
Compliance oversight and anti-money laundering reporting should be undertaken by competent, appropriately resourced personnel. Whether separate full-time roles are necessary depends on size, conflicts of interest and actual activities. The certification regime covers specific functions capable of causing significant harm to customers, the firm or markets; it does not require certification of all customer service personnel, nor annual reapproval of SMF by FCA. Where MLR applies, the responsibilities of MLRO and the overall anti-money laundering responsibilities of directors or senior management should be clear. Outsourcing does not transfer board responsibility.[14] [18]
Local substance should demonstrate genuine decision-making, accessible business records, and channels for regulatory communication and supervision; renting a registered address alone cannot demonstrate the ability to operate. FCA requires applications to explain how overseas function holders perform their duties remotely, so it is inappropriate to claim that all shareholders, directors or SMF must reside permanently in the UK. Investment business applications generally need to specify a designated principal place of business in the UK; overseas entities or POP models must still check their respective authorisation thresholds, rather than being arbitrarily required in every case to establish a UK subsidiary.[4] [7] [15]
Capital and financial resources
IPRU-INV 12 financial resources are the higher of £50,000 and the amount calculated progressively by reference to outstanding loan balances: 0.2%, 0.15%, 0.1% and 0.05% apply to the prescribed bands respectively. Solvency and wind-down resources must also be maintained, taking account of higher requirements for other activities conducted.[3]
Registered office and operational substance
The UK registered address, principal place of business, actual platform operating location and location of client money accounts are distinct information. Application documents should be consistent and explain each location’s purpose. Investment business application guidance requires a designated UK principal place of business and an explanation of how and where activities are conducted; platforms must provide records accessible to regulators and contact with personnel. Virtual offices cannot replace effective supervision and genuine operating arrangements, and there is no evidence supporting a requirement for crowdfunding businesses to be in London or have a uniform office floor area.[4] [15]
Remote operations, overseas directors and outsourced service providers can be analysed according to the specific authorisation model. This does not justify asserting that all overseas companies need a UK subsidiary, or conversely that UK company registration alone is sufficient to cover overseas operations. The final POP rules do not universally restrict this new activity to companies with a place of business in the UK, but the relevant requirements for cross-border legal status, feasibility of supervision and parallel investment permissions must still be met. It should be clear which legal entity contracts with customers, receives complaints and bears responsibility for customer funds.[7]
Application document checklist
Submit the applicant’s certificate of formation, articles or partnership agreement and complete group/ownership structure chart, identifying controllers and beneficial owners. Existing operating entities should explain their current business, overseas regulation and relationship with the applicant platform; a UK certificate of incorporation alone is insufficient.[4] [15]
Provide a platform-specific regulatory business plan explaining P2P or investment instruments, investor categories, financing recipients, revenue sources and proposed activities. Attach a flowchart from project publication through refunds, lending, repayments and exit, together with a responsibility matrix identifying who performs each step, contracts and holds funds.[2] [4]
Submit financial forecasts, capital calculations, cash flow sensitivity analyses and evidence of capital sources; investment business application guidance requires monthly profit and loss, balance sheet, cash flow and capital analyses for three years. Prepare P2P tiered calculations or MIFIDPRU/POP calculations according to the applicable prudential framework. Bank evidence of funds injected, SH01 or appropriate LLP capital terms should be consistent with the forecasts.[3] [15]
Compile key personnel biographies, identity and suitability materials, applicable SMF Form A submissions and statements of responsibilities, and explain outside business activities and conflicts of interest. Prepare references, criminal record checks and role qualifications according to the relevant requirements. CeMAP, CFA or standardised passport notarisation should not be listed as legally mandatory credentials for every crowdfunding role.[4] [14]
Attach project onboarding policies, issuer or borrower due diligence procedures, risk grading, valuation/pricing methods and approval authority records. POP should also cover issuance information, financial viability checks and disclosure responsibilities; P2P should document credit models and the basis for default and recovery rate disclosures.[6] [7]
Provide customer terms, fee explanations, risk warnings, investor classification declarations and appropriateness tests, using actual platform screens or test evidence to explain how the 24-hour cooling-off period and lockout after failure operate. Financial promotion approval procedures must cover project materials, emails and social media; materials visible after registration cannot all be excluded from financial promotion regulation.[9] [10]
If holding client money or assets, submit a funds flow analysis, client account arrangements, applicable CASS policies and reconciliation procedures, and explain auditor arrangements. If claiming not to hold client money, demonstrate who receives and controls the funds and whether third parties have the corresponding permissions; a payment outsourcing contract alone must not be provided in place of legal analysis.[15] [20] [25]
Prepare an orderly wind-down plan, trigger indicators, an execution budget and backup loan servicing or asset record migration agreements. P2P should specifically demonstrate that existing loans will continue to be serviced through collections and payments, debt recovery and enforcement of rights if new business stops or the platform becomes insolvent, rather than treating website closure as the end of its obligations.[6] [10]
Attach the Consumer Duty assessment, complaints and vulnerable customer support procedures, together with applicable anti-money laundering risk assessments, customer due diligence and suspicious activity escalation procedures. Technical materials should cover access management, network and data protection, business continuity and supplier exit arrangements. Requirements must correspond to the platform’s actual business rather than an indiscriminate full set of templates.[4] [10] [18]
This is provided as a reference for organising the project; it cannot replace current official application forms or case-specific requests for additional materials. Please do not send identity documents or customer records through website forms.
Application process and key steps
The first step is to determine the regulatory perimeter and fix the legal entity and list of activities, distinguishing P2P agreements, equity/bonds, POP offerings and ordinary fundraising. Review payments, custody, advice, residential finance and secondary trading systems in parallel, rather than using a single permission to cover the entire business chain.[2] [7] [15]
The second step is to complete staffing, capital and platform preparations, using FCA pre-application support to discuss specific regulatory issues in the business where appropriate. Policies must be signed off by the responsible persons, systems should be tested, and key outsourcing, bank accounts and exit arrangements should have evidence of implementability, rather than merely intentions for after approval.[4] [15]
The third step is to submit a Part 4A authorisation application or the applicable variation of permission application through Connect, while also addressing the required SMF and financial promotion approval gateway. Pay the application fee for the combination of permissions and keep all documents consistent. Payment, registration or submission alone confers no right to operate.[4] [10] [16]
Step four: the FCA case officer reviews threshold requirements, financial forecasts, personnel and systems, and may request explanations, supplementary information, calls or interviews. Those genuinely responsible should answer questions about project risks, client money and the wind-down budget. Repeated fundamental changes to the business model during the application should be avoided; material changes may lead to withdrawal and reapplication.[4]
The fifth step is to receive the written decision and verify the permitted activities, investment types, limitations and effective date, then check the public Financial Services Register entry. After registering for RegData, establish a reporting calendar and confirm before starting business that client money, promotion approval and outsourced services meet the approval conditions. Regulated business generally must not be conducted while an application is under review, except where an exemption or temporary permission arrangement genuinely applies.[4] [13] [24]
Approval deadlines and project timelines
Section 55V of FSMA requires a decision on a complete Part 4A application within 6 months from the regulator's receipt of the complete application; an incomplete application must be decided within 12 months from receipt of the application. These are decision deadlines, not guarantees of approval, and 12 months cannot be described as the statutory deadline for all complete crowdfunding applications. Corresponding variations of Part 4A permission are also handled within that framework; the original page's fixed 3–6 month table must not be applied mechanically.[4] [5]
Preparation falls outside the statutory assessment periods above, and the UK has no uniform statutory number of preparation months for crowdfunding projects. Internal budgets may use 3–6 months as an initial planning assumption for recruitment, accounts, systems, policies and capital preparation, but this is not an average or service commitment published by FCA. Complex combinations of POP, client money and secondary markets may take longer; actual schedules should reflect readiness evidence and key dependencies.[4]
An important starting point for FCA regulation of loan-based crowdfunding is 2014-04-01, not the uniform transfer on 2013-04-01 stated in the original text. Most PS19/14 rules strengthening P2P governance, promotions and wind-down took effect on 2019-12-09, with the related MCOB requirements preceding them on 2019-06-04. Risk warnings for high-risk investment promotions were implemented on 2022-12-01 and the remaining requirements on 2023-02-01. POP took effect on 2026-01-19 and is no longer a future regime existing only in consultation form.[6] [7] [9] [26]
The POP transitional VoP regime is for existing authorised firms not regulated by PRA. The applicable window required the relevant application to be made within 3 months of commencement; applications submitted early were treated as made on the commencement date. Temporary permission requires written notice from FCA, and its termination is linked to events such as withdrawal, a decision or cancellation of permission. As of 2026-11-07, the original three-month window can no longer be presented as a general entry route for new applicants. Cases with valid temporary permission should be checked against their notices and current application status, rather than assuming all firms still have temporary rights to conduct business.[24]
Changes to shareholders, directors and permissions
Acquiring or increasing control generally requires prior notification under section 178 of FSMA and approval from FCA. The assessment period for a complete notification is 60 working days, excluding interruptions for lawfully requested additional information. Directive categories such as MiFID generally involve control bands of 10%, 20%, 30% and 50%. Non-Directive categories, such as non-MiFID investment firms, generally have a single band of 20% or above, alongside assessment of significant influence. The original text incorrectly inserted 33% as a uniform crowdfunding threshold: that figure concerns another category of limited-permission consumer credit firm and cannot be applied here.[11] [12]
A reduction into a lower control band or cessation of control should also be notified in advance, but normally does not require approval; indirect holdings, joint voting and becoming a parent undertaking must all be included in the analysis. Acquiring shares does not transfer FCA permissions to the buyer's company: permissions remain with the originally authorised legal entity. Adding POP, investment advice, custody or trading venue activities requires separate handling of the applicable variation of permission; completion of the share transaction is not a substitute.[4] [11]
Director replacements should distinguish company registration changes from regulatory function changes. New appointees performing SMF requiring approval should first obtain approval under the relevant rules. Departures or responsibility changes require corresponding notifications and updates to statements of responsibilities. Control notifications are not the purpose of Form C, nor must all directors apply for the same SMF. Material changes to business, financial resources and client money may also trigger timely notification obligations such as SUP and should not be left until annual reporting.[3] [4] [14]
Ongoing compliance and annual maintenance
Recalculate at the accounting reference date and when balance growth exceeds 25%, and notify FCA within 14 days of a change or anticipated change in the requirement. Continuously maintain loan servicing, CASS arrangements and wind-down plans; follow the actual regulatory reporting calendar rather than a single uniform crowdfunding frequency.[3] [6] [13]
Acquisition due diligence and transaction considerations
Before acquiring a crowdfunding platform, check the exact activities, restrictions and client money eligibility in the FCA Register and approval documents, rather than merely whether FRN exists. Confirm that P2P, investment arranging, financial promotion approval and POP permissions are actually all in place, particularly checking the POP transitional application, written temporary permissions and termination conditions. Historical licences or expired transitional arrangements cannot support new business after completion.[4] [10] [24]
Specialist P2P due diligence should examine loan ledgers, outstanding balances, definitions of arrears, actual recoveries and fee deductions, either loan by loan or through risk-based sampling, and verify tiered capital calculations and whether growth exceeding 25% triggers recalculation. Key checks include the legal enforceability of loans and guarantees, assignment of receivables, whether a standby servicer can take over, whether data can be migrated in full, and who will handle principal and interest payments and collections after the platform ceases business. Inconsistencies between published default rates, advertising for automatic investment diversification and actual portfolio results may create consumer redress and regulatory risks.[2] [3] [6]
Due diligence for investment-based crowdfunding and POP should examine evidence of issuer verification, securities terms, nominee or custody arrangements, material disclosure updates and promotion approval permissions. If a secondary market evolves from a bulletin board into a multilateral matching system, trading venue boundaries must be reassessed; low trading volumes or the absence of transaction fees alone cannot justify an exemption. Historical incentive rewards, coaching on categorisation tests and unfulfilled liquidity promises may also become continuing liabilities after acquisition.[9] [10]
Financial and operational due diligence should incorporate CASS shortfalls, outstanding complaints, financial crime records, customer support obligations and wind-down liabilities into the valuation; project cash must not be treated as cash distributable to the seller. Check recent audit opinions, lists of rule breaches, regulatory correspondence and change-of-control clauses in outsourcing contracts, then set the necessary regulatory approvals and capital replenishment as completion conditions. A share acquisition requires the corresponding change-of-control approval first, while an asset acquisition must not assume that permissions transfer with the assets.[11] [20]
View the complete process for acquiring a licensed companyBusiness segments and applicable regimes
The following are specific permissions, organisational models or statutory categories covered by this topic. They do not necessarily each constitute a separate financial licence.
Frequently asked questions
Does the UK have a single crowdfunding licence covering all models?+
No. Permissions for loan-based electronic systems, investment arrangements, POP, financial promotion approval and client asset functions are determined by the relevant activities. Donations or rewards in kind are generally outside FCA investment regulation in themselves. There is insufficient official support for the original text’s claim of two uniform crowdfunding routes: full authorisation and limited permission.[1] [2] [7]
Is the minimum capital for P2P lending £5,000 to £25,000?+
No. The fixed floor under IPRU-INV 12 is £50,000, with the requirement being the higher of that floor and the amount calculated cumulatively across the prescribed bands of outstanding loan balances. The illustrative requirement for an outstanding balance of £100 million is £175,000. A further comparison is required where other activities with higher requirements are also undertaken.[3]
If outstanding P2P loans suddenly increase, can the platform wait until its next annual report to replenish capital?+
No. If the balance increases by more than 25% over the figure last used in the calculation, it must be recalculated using the higher balance. FCA must be notified within 14 days of a change in financial resource requirements or of becoming aware that they may change. The platform must still meet resource requirements at all times; the notification period is not a grace period permitting a capital shortfall.[3]
Is public fundraising below £5 million entirely exempt from requiring FCA permission?+
No. That amount is an exception to the prohibition on public offers of securities. Arranging deals, financial promotions and other activities may still be regulated. Qualifying previous offers by the same issuer within 12 months must be aggregated; splitting issuance into multiple rounds of £5 million does not automatically circumvent the rules.[8]
Must every fundraising above £5 million use POP?+
No, that is not correct either. Arrangements involving offers only to qualified investors, offers to fewer than 150 non-qualified investors in the UK, certain listings or other statutory exceptions should each be assessed under the regulations. POP is the regulatory route for eligible public offers where no other exception applies; a high-net-worth individual is not automatically a statutory qualified investor.[8] [23]
Have existing investment-based crowdfunding permissions automatically converted into POP permissions?+
No. Existing authorised firms should obtain the corresponding variation of permission. The specific transitional regime requires a timely application and written notification from FCA. The three-month window from the original effective date has expired; as of the verification date, new applicants should not be told they may start operating without awaiting a decision.[7] [24]
Is the statutory deadline for a complete application 6 months or 12 months?+
A complete Part 4A application must be decided within 6 months of receipt of the complete application, and an incomplete application within 12 months of receipt. This is not a distinction between 12 months for full authorisation and 6 months for limited permission, nor a promise of automatic approval. Company and systems preparations are additional; withdrawal and resubmission create a new application process.[4] [5]
Does lending only from one company to another always remove the need for authorisation?+
The actual contracts must be examined. Article 36H imposes individual and relevant person conditions on lenders or borrowers; a corporate borrower with an individual lender may still constitute P2P. Even where wholly corporate lending falls outside Article 36H, securities arrangements, other credit and financial promotion boundaries must be checked.[2]
Must all directors and heads of compliance be permanently based in the UK?+
There is no such uniform conclusion for crowdfunding. FCA requires explanations of remote performance of duties, actual business locations and supervisory arrangements. Individuals performing applicable functions must still have the necessary competence, time and availability for contact. Incorporating a UK company or borrowing a UK address cannot replace genuine operations and effective supervision.[4] [15]
Does high-net-worth investor status exempt a platform from authorisation?+
That overall inference cannot be made. Investor classification, financial promotion exemptions and the platform’s regulated activity permissions are separate issues, each with conditions that must be met independently. The platform should use current category statements and must not steer customers into self-classification to bypass protections.[2] [9]
Can customer service staff help bypass the 24-hour cooling-off period and investment knowledge test?+
No. The applicable cooling-off period is at least 24 hours from the customer’s request to view a direct offer promotion, after which a prominent choice to proceed or leave should be provided. Answers must not be supplied for the appropriateness test. Two consecutive failures, and each subsequent failure, should trigger a lockout of at least 24 hours.[9]
Are investment suitability and borrowing affordability assessments the same thing?+
No. Appropriateness assesses investors’ knowledge and experience, while borrowers’ affordability/creditworthiness assesses repayment and credit risks. An appropriateness assessment where no personal recommendation is provided cannot replace required borrower checks, while providing personal recommendations raises different suitability and permission issues.[6] [9]
Does FSCS guarantee the principal invested in P2P lending and equity crowdfunding?+
No guarantee is provided. Investment losses arising from the investment performance of P2P lending and direct equity crowdfunding, borrower defaults or company failures cannot be treated as losses covered by deposit protection. Where there is separate misconduct involving protected financial services or other circumstances, analyse the specific service and the FSCS conditions. Platform authorisation or payment of fees must not be presented as a capital guarantee.[1] [10]
Does not holding client money necessarily mean that no audit is required?+
No blanket conclusion is possible. Financial statements and client assets reports are governed by different rules. An investment firm within the scope of client assets reporting may require a limited assurance report even if it states that it holds no assets. The applicable reporting period is generally no longer than 53 weeks, with submission by the auditor within 4 months of period-end, subject to exceptions in the rules.[20]
Can CASS be disregarded simply by handing funds to a payment company?+
No. Client money obligations must be analysed by reference to who actually receives, controls and holds the funds, and third-party service providers should also have the corresponding regulatory status. When operating IFISA, cash awaiting investment must also satisfy the HMRC sterling and designated deposit account requirements; an electronic wallet cannot replace them.[15] [17] [25]
Can new crowdfunding products be added directly after acquiring an existing licensed company?+
No. First verify change-in-control approval and the company’s actual permissions. Adding POP, advice, custody or a trading venue may require a variation of permission. Completion of a share transfer does not transfer permissions to another entity of the buyer, and historical promotions, client assets and existing loan responsibilities also require due diligence.[4] [11]
Do FCA crowdfunding application fees start at £100 or £250?+
The original page's low-, medium- and high-impact crowdfunding fee table must not be reused. Current official application fees use 10 permission pricing categories, ranging overall from £280 to £225,170. A particular crowdfunding business combination must be checked against its permissions and the highest applicable category. Application fees are non-refundable, and annual regulatory fees are payable separately. The range across all categories must not be misrepresented as a standalone P2P fee schedule.[16]
Can a platform stop servicing existing loans when it stops taking on new projects?+
No. P2P wind-down arrangements must address continued receipts, payments, collections and exercise of rights for existing loans, and how funding, data and customer support will continue. Verify the backup servicer’s permissions, contracts, technology and budget rather than merely preparing a website closure notice.[6] [10]
Official basis and verification sources
Primarily based on FCA, PRA / Bank of England, GOV.UK and current legislation. Older third-party guides supplied by users are used to organise business material and do not override the latest official requirements.
Tang Shangyong (Mr Tang / Drew) · Business Manager
Global financial licence application, transaction and ongoing compliance services