Business scope and permission boundaries
A website that displays actionable insurance quotes based on user criteria, produces rankings or assists in concluding contracts may be carrying on arranging or other insurance distribution activities. Simply describing the service as an “advertising platform” or as “not providing advice” does not automatically exclude regulation; FCA application guidance for general insurance intermediaries expressly includes price comparison websites.[1] [34]
Application value and choice of route
Select the minimum sufficient combination of permissions that lawfully supports the actual business, client scope and financial responsibilities, rather than treating the broadest permissions or fastest approval as the sole objective.
Direct authorisation allows UK insurance distribution within approved activities and restrictions, with verifiable regulatory status shown on the Financial Services Register. It helps insurers and customers verify the business scope, but is not commercial endorsement by FCA of product quality, investment returns or a consulting firm.[31]
Brokers, agents, MGA and comparison channels can form different business models within the same insurance distribution framework. Intermediaries can use insurers’ underwriting capacity to serve customer segments, but must establish corresponding product governance, permissions and allocation of responsibilities. Cooperation agreements cannot replace regulatory permission.[3] [16]
Clear client money and professional indemnity insurance arrangements can reduce risks arising from premium transmission, claims payments and historical sales liabilities. Compliance records also support acquisition due diligence and cooperation with insurers, but UK authorisation does not confer EU passporting rights or automatic market access in other countries.[6] [7]
Application conditions and entry requirements
Explain algorithmic rankings, the insurer panel, commission effects, referral routes and where customers complete their insurance purchase. Pages and processes must avoid misleading customers into believing that the lowest premium means the most suitable cover, and must implement needs assessments and service-scope disclosures according to actual activities.[23] [32]
Shareholders, directors and key personnel
Shareholders and controllers: disclose direct and indirect ownership, voting rights, group structure, joint control arrangements and ultimate sources of funds; do not collect information only on natural persons holding shares directly. Ordinary general insurance intermediaries are non-Directive firms under the control regime, generally subject to a single 20% threshold and the significant influence test. The 10% insurer-related shareholding disclosure rules are a different regime from controller approval thresholds.[20] [21] [23]
Directors and senior management: ordinary professional intermediaries generally fall within Core SM&CR, but sole traders and ancillary insurance intermediaries meeting the conditions for non-core financial business may fall within Limited Scope. Conditions such as intermediary regulated business revenue reaching £35 million on a three-year rolling average may trigger the Enhanced category. Firms should confirm their classification under the current SYSC rather than describing themselves as having 'limited permission' simply because they are small.[14] [15]
SMF and compliance: those actually performing relevant senior management functions must obtain individual approval and maintain statements of responsibilities. Core firms may involve SMF1, SMF3, SMF9, SMF27 and, where applicable under the rules, SMF16 or SMF17. Not every intermediary must simultaneously appoint an independent CEO, a dedicated SMF16 and SMF17, nor does every director automatically require approval. Responsibilities may be combined under acceptable arrangements, subject to capability, time and conflict-of-interest controls.[15]
Certification and training: firms themselves certify persons within the Certification Regime and reassess fitness at least annually, rather than applying to FCA for approval for all customer-facing employees. From 2025-12-09, the uniform minimum of 15 hours of CPD for non-investment insurance staff was removed, but competence and ongoing role-specific training requirements were not abolished. Long-term insurance staff remain subject to at least 15 hours every 12 months and retention of training records for at least three years after leaving their role. Those subject to retail investment adviser rules have separate 35-hour arrangements.[16]
Local substance: UK operations must have a genuine team and business arrangements capable of undertaking decision-making, customer service, compliance monitoring and regulatory communication. The FCA application guidance expressly requires the principal place of business to be specified and notes that serviced offices are generally insufficient. Where key personnel are overseas, arrangements for remote performance of duties, supervision and access to information must be explained, rather than claiming that all shareholders or SMF must invariably be UK residents.[1]
Capital and financial resources
Directly authorised platforms are subject to capital rules based on their actual permissions, income and fund-holding model; there is no uniform standalone “comparison website capital amount”. Where a platform only makes introductions and communicates financial promotions as an IAR, its admission and responsibilities derive from appointment by its principal, not a separate comparison licence.[4] [22]
Registered office and operational substance
A general insurance intermediary application should provide the principal place of business, a UK corporate bank account and the relevant Companies House registration information. If client money will be held, a client money bank account must also be prepared. The registered office, actual business premises and location of management decision-making must be explained separately. A mail-forwarding or shared office address alone is usually insufficient to demonstrate the substance required for regulation.[1]
Overseas groups may assess a UK subsidiary or a suitable branch structure, but branch registration itself does not constitute FCA authorisation. The applicant entity, effective supervision and applicable personnel rules must be confirmed. Rengang Yongsheng (Hong Kong) Limited and Tang Shangyong (Mr Tang) may be named as consulting service brands; their Hong Kong or Shenzhen addresses should not be described as the applicant's UK operating entity or an official FCA contact location.[1] [3]
Application document checklist
Entity and control information: corporate applicants should prepare incorporation certificates, constitutional documents, company numbers, complete ownership and group structure charts, and an explanation of actual control arrangements. Sole traders and partnerships should provide corresponding legal and business information; limited company articles must not be required as a substitute for all entity documents.[1] [5]
Regulatory business plan and business processes: explain insurance classes, customers, authorised activities, insurer partnerships, sales channels and whether advice is provided, with the commission or charging model attached. MGA should also provide the scope of delegated authority or binding authority, explaining who sets prices, who bears insurance liability and who handles claims.[1] [3]
Financial and capital evidence: prepare financial forecasts consistent with the plan, recent management accounts or existing financial statements, evidence of funding sources and capital injections, and calculations under MIPRU or other applicable frameworks. Provide a PII policy or implementable underwriting arrangements, with analysis of deductibles and exclusions; if the company has no trading history, do not fabricate three years of audited financial statements.[1] [5] [6]
Personnel and governance materials: provide senior managers’ curricula vitae, applicable Form A submissions and statements of responsibilities, background checks and regulatory references, and set out the actual governance and reporting structure. The list of certified staff and training and competence assessment procedures must reflect actual roles. Whether a management responsibilities map is mandatory must be determined by the specific category, such as Enhanced.[14] [15]
Sales and product documentation: prepare customer terms, status and remuneration disclosures, demands and needs records, applicable recommendation explanations, product information documents, marketing materials and digital sales journeys. Also prepare target-market and fair-value evidence and arrangements for information exchange between manufacturers and distributors. Do not mistake SECCI or a representative APR for universal insurance sales documents.[16] [23] [32]
Client money information: where funds will be held, prepare the trust election, client bank accounts, bank acknowledgements, reconciliation methods, responsible persons and relevant audit arrangements. Where relying solely on risk transfer, provide written agency agreements with insurers and specify whether every stage of premiums, refunds and claims payments is covered; verbal commitments to cooperate are not a substitute.[7] [8] [10]
Ongoing compliance policies: prepare documentation for complaints and FOS referrals, Consumer Duty monitoring, support for vulnerable customers, conflicts of interest, outsourcing, cybersecurity and business continuity. When conducting long-term insurance business, also prepare AML risk assessments, CDD, ongoing monitoring and suspicious activity reporting arrangements consistent with the scope of MLRs; do not mechanically apply all life insurance AML requirements to intermediaries dealing solely in general insurance.[18] [25] [27]
This is provided as a reference for organising the project; it cannot replace current official application forms or case-specific requests for additional materials. Please do not send identity documents or customer records through website forms.
Application process and key steps
The first step is a regulatory scope assessment to determine whether direct authorisation, AR or a statutory exclusion fits the actual sales conduct. Analyse premium finance, claims assistance and overseas customer business separately, and clarify the insurance contract types and client money permissions to be applied for before deciding on the corporate structure.[1] [22] [34]
The second step is to put governance, banking, substantive operations, financial resources and PII in place, and complete management-approved business plans and policies. Complex or innovative businesses, or those with clear perimeter questions, may use FCA pre-application support, but informal discussions are not advance approval and do not guarantee success in a formal application.[31]
The third step is to submit the firm application, supporting materials and applicable individual approval applications through Connect, and pay the correct category of application fee. FCA requires applicants to be ready, willing and organised at submission; it will not treat unfinished drafts as a mature application or design the application on the applicant’s behalf.[31] [12]
Step four: FCA reviews the scope, threshold conditions, finances, personnel and consumer risks, and may raise documentary enquiries or conduct interviews. Responses should provide complete evidence by the specified dates. Material business model changes may require withdrawal and reapplication. No uniform number of enquiry rounds or fixed average approval time can be promised.[31]
The fifth step, after receiving the approval notice, is to check the effective date, approved activities, contract types, limitations and client money permissions, and verify the Financial Services Register. Regulated sales must not begin during the assessment period unless a clearly applicable exclusion or temporary permission exists. After approval, set up RegData tasks, ongoing PII and a monitoring calendar.[31] [9]
Approval deadlines and project timelines
Statutory decision time limits: section 55V(9) of FSMA provides that, where an application for Part 4A permission or VoP relates only to insurance distribution activity, the time limit for a complete application is three months, rather than the general six-month period. For an ordinary complete Part 4A application that includes other activities and does not qualify for this special rule, the time limit is generally six months; an incomplete application must be determined within twelve months of its initial receipt. This must not be described as a uniform twelve-month period for complete insurance applications.[11]
Preparation and regulatory periods should be budgeted separately. Applications with mature organisations, personnel and well-developed insurer cooperation may allow around three to six months in project planning to prepare business plans, policies and systems. This is only a consulting project budgeting reference, not an official processing period or a promise of licensing within three to six months.[31]
The general six-month explanation for FSMA on the FCA webpage cannot override the specific legal rules for insurance distribution, and enquiries do not mean that an application will necessarily be approved. Record the dates on which FCA receives materials and confirms completeness, and manage firm approval, SMF individual approval and acquisition-related change in control approval as separate processes; they must not be combined into a single guaranteed delivery date.[31] [11] [20]
Changes to shareholders, directors and permissions
Changes in control: general insurance intermediaries are usually non-Directive firms. Acquiring 20% or more of the shares or voting rights in the company or its parent, or acquiring significant influence, may trigger Section 178 notification and prior approval. This category has only one 20% control band. Increases or decreases within that band do not generally trigger a further threshold-crossing application, but relinquishing control still requires prior notification. Where other permissions are also held, recheck the classification rather than applying insurers' tiered thresholds.[20] [21]
The statutory assessment period for a complete change in control notification to FCA is 60 working days, excluding lawful interruptions for additional information. Transaction agreements should make the required regulatory approvals conditions precedent to completion. Intra-group transfers, nominee holdings, joint investments and passive increases in holdings caused by inaction must also be checked; parties must not complete first on the grounds that the existing licence remains unchanged.[20]
Changes in directors and SMF: those performing SMF requiring individual approval should obtain approval before taking up the role. Departures, changes in responsibilities or fitness and propriety events must be notified using the applicable forms and deadlines. Form C concerns the departure of approved persons, not an application to acquire control; changes in ordinary non-SMF directors should also be checked for Companies House, governance and FCA notification obligations.[15] [20]
Changes to the business or funding model must be checked against existing permissions. For example, adding investment-based life insurance, moving from risk transfer to holding client money, or expanding into new regulated activities may require VoP. Changes to the types of activity of AR generally require at least 10 calendar days' advance notice, while other information changes are normally updated within 10 working days after the change. These deadlines should not be applied to all changes at directly authorised firms.[10] [22]
Ongoing compliance and annual maintenance
Continue testing quote accuracy, presentation of exclusions, cancellation processes and accessibility for vulnerable customers, and review the impact of algorithm or fee changes on customer outcomes. New white-label channels or platform partnerships require checks on participating entities' permissions; the principal's FRN must not be displayed on all unappointed websites.[22] [27]
Acquisition due diligence and transaction considerations
First check the target company’s exact permissions, client money permissions, product restrictions and regulatory status, then examine whether its actual business has persistently exceeded its permitted scope. A share acquisition may preserve the same legal entity’s authorisation, but is not the free purchase and sale of a licence. Buying assets or moving business into another entity generally does not transfer the original permissions; the transferee’s permissions, contracts and customer transfers must be assessed separately.[1] [20]
Distinctive assets of insurance intermediaries include underwriting partnerships and distribution contracts. Check whether arrangements with insurers, wholesale brokers, MGA binders or Lloyd’s coverholders contain change-of-control termination or consent clauses. Also check entitlement to renewal income, commission clawbacks, unearned commission, liabilities for policies already sold and concentration among principal underwriters, rather than valuing a client book solely on accounting profits.[3] [16]
Client money due diligence must reperform reconciliations between trust and insurer accounts, identifying premiums, refunds, claims payments and insurer receivables unmatched for years, as well as gaps in risk transfer across upstream and downstream chains. Non-statutory trusts may include receivables from credit advances to customers or insurers, whose recoverability should be verified. Trust balances or customer receivables must not be counted as free cash deliverable to the seller.[7] [8] [10]
Historical sales liabilities should cover unsuitable recommendations, double charging, support for vulnerable customers, buildings insurance or other multi-party policy benefit arrangements, and FOS complaints and potential redress obligations. For PII, verify retroactive dates, exclusions, excesses, change-of-control clauses and run-off cover, rather than checking only the current year’s insurance certificate. Transaction funding sources, buyer governance and future effects on the business should be included in the change-of-control application.[6] [20] [27]
View the complete process for acquiring a licensed companyBusiness segments and applicable regimes
The following are specific permissions, organisational models or statutory categories covered by this topic. They do not necessarily each constitute a separate financial licence.
Frequently asked questions
Must UK insurance intermediaries always be licensed by both FCA and PRA?+
General insurance distribution intermediaries are primarily regulated solely by FCA; carrying on insurance business does not automatically subject them to prudential regulation by PRA. The PRA guidance for new insurers defines insurers by permission to effect or carry out contracts of insurance. MGA or broker structures must be distinguished according to who actually bears the risk.[3]
Are there 'full authorisation' and 'limited permission' tiers for insurance intermediaries?+
The consumer credit distinction between full permission and limited permission cannot be applied to insurance. For insurance, check the activity restrictions under direct authorisation, AR or statutory exclusions. SM&CR limited scope is only a personnel governance classification, not another cheaper insurance licence.[12] [14] [22]
Is capital of only £5,000 required where no client money is held?+
Where only applicable MIPRU insurance distribution or mortgage intermediation is conducted, the requirement is the higher of £5,000 and 2.5% of relevant annual income, not always a fixed £5,000. Eligible capital deductions, additional capital for PII excesses and actual liquidity must also be considered. Mixed investment business may be subject to different formulas.[4] [5] [6]
Why does £50,000 arise in a non-statutory client money trust?+
CASS 5.4 requires firms holding money for retail customers under this trust to maintain capital of at least £50,000, with written auditor confirmation of controls and customers' informed consent. Existing eligible MIPRU capital may also satisfy this threshold; £60,000 should not be mechanically added.[8]
Is the minimum PII amount denominated in sterling or euros?+
The current RMA-E guidance from FCA states minimum indemnity limits, including €1,300,380 per claim and €1,924,560 in the annual aggregate, in euros, not pounds sterling. Policies in other currencies require verification of the euro equivalent on the inception and renewal dates, with consideration also given to the proportion of annual income and additional capital for excesses.[6]
Is the period for a complete pure insurance distribution application three months or six months?+
Section 55V(9) of FSMA provides a special three-month rule for complete Part 4A or VoP applications involving insurance distribution only. Ordinary complete Part 4A applications involving other activities are generally subject to six months; the twelve-month period for incomplete applications runs from initial receipt. Preparation time is not included in these regulatory periods.[11]
In 2026, are all insurance sales staff still required to complete 15 hours of CPD?+
The uniform minimum of 15 hours for non-investment insurance staff was removed from 2025-12-09, but staff must still maintain knowledge and competence appropriate to their roles. Long-term insurance staff, including those involved in life insurance other than pure protection, long-term care and rights under life policies, remain subject to the 15-hour requirement. Those subject to retail investment adviser rules must also address the 35-hour requirement.[16]
Can pure protection life insurance be exempt from MLR because it does not involve investment?+
The application of the anti-money laundering regulations cannot be determined solely by whether investment is involved. Regulation 10(2)(f) of MLRs addresses insurance intermediaries conducting business relating to long-term insurance contracts. Pure protection products must still be checked against the legal classification of the contract; general non-life insurance business alone does not fall within the same automatic scope.[18]
Does receiving premiums necessarily mean an intermediary is holding client money?+
No. Risk transfer under which the insurer accepts in writing the risk of collection by its agent can make covered monies funds held as agent of the insurer. Whether premiums, refunds and claims payments are covered by the agreement must be confirmed individually, and the conditions for commingling with client trust money must be met. This cannot be inferred merely from a relationship with an insurer.[7] [10]
Must all small intermediaries have financial-statement audits and CASS audits?+
These are not the same regime; annual financial statement audits depend on company law and other applicable requirements. CASS client money audits generally cover general insurance intermediaries holding money in non-statutory trusts and those whose statutory trust holdings exceed £30,000 during the period. Firms should determine the requirement from their actual money-holding arrangements rather than uniformly claiming exemption or mandatory application.[10]
Must an acquisition of an ordinary general insurance intermediary be applied for under 10%, 20%, 33% and 50%?+
General insurance intermediaries are usually non-Directive firms, with a single change-in-control band of 20% or above, including parent undertaking holdings and significant influence tests. The 10% client disclosure concerning insurer-related holdings is a separate obligation. Firms conducting different regulated activities must reassess the applicable control category.[21] [23]
Is AR a low-cost alternative certificate to an insurance licence?+
AR operates within the principal's responsibility, supervision and written appointment and does not hold independent authorisation. The principal generally notifies FCA at least 30 days in advance and conducts ongoing annual reviews. IAR may only make introductions and communicate financial promotions, not provide advice beyond that scope.[22]
Does an ancillary insurance premium below £500 necessarily mean that FCA is not required?+
No. £500 is a proportionate annual premium condition for the connected insurance exclusion in Article 72B of RAO; certain short-service insurance has a separate £175 condition. Restrictions concerning the product, its connection to goods or services, non-long-term insurance, motor vehicle goods, liability insurance and travel must also be met. Motor dealers cannot simply apply the exclusion because insurance is ancillary to their business.[30]
Does having product design authority allow MGA to act as lead for all product governance responsibilities?+
The 2025 reforms allow a qualifying insurer or Lloyd’s managing agent to act as a single PROD lead, but do not include an ordinary MGA within that lead role. MGA must still assess its own co-manufacturing and distribution responsibilities; a binder alone cannot transfer away the insurer’s oversight responsibilities.[16]
Can FCA authorisation be used directly to serve EU customers?+
UK authorisation cannot serve as an EU insurance distribution passport; market access must be assessed under the relevant country's rules and the rules governing cross-border activities. The CP26/22 proposals in 2026 to further adjust conduct rules for non-UK business are not permission to operate abroad either, and the consultation itself must not be presented as having already abolished all UK client protection rules.[17]
Is it true that insurance is outside FSCS protection?+
That is untrue. FSCS officially confirms insurance protection, which may provide cover of 90% or 100%, among other levels, for eligible policies of failed insurers. Insurer failure, insurance intermediary sales liability and investment-based life insurance advice involve different routes. The conditions or amounts for one route cannot be applied directly to all intermediary clients.[29]
Must the Consumer Duty board report be submitted to FCA on day 31 of month 7 every year?+
Current rules require the governing body to review and approve the report at least annually, confirm compliance and strategy, and agree remedial action. It is not a standard return submitted to FCA every year on month 7, day 31. 2023-07-31 and 2024-07-31 concern implementation milestones for open business and closed products respectively; implementation dates must not be mistaken for permanent reporting deadlines.[27]
Can Ren Gang Yong Sheng guarantee FCA approval and a one hundred per cent success rate?+
Ren Gang Yong Sheng (Hong Kong) Limited and Tang Shangyong (Mr Tang) may prepare consultancy materials and assist with business assessments, document preparation and ongoing compliance arrangements, but approvals are decided independently by FCA in accordance with the law. This article does not adopt the original guide’s one hundred per cent success rate, extremely short approval records or unverified client numbers as publishable facts, nor does it imply official cooperation with or endorsement by FCA.
Official basis and verification sources
Primarily based on FCA, PRA / Bank of England, GOV.UK and current legislation. Older third-party guides supplied by users are used to organise business material and do not override the latest official requirements.
Tang Shangyong (Mr Tang / Drew) · Business Manager
Global financial licence application, transaction and ongoing compliance services