Insurance distribution and intermediationGuide to applications and ongoing compliance

Arranging, advising on or handling the performance of insurance contracts, with conditions determined by client money, professional indemnity insurance and ancillary business arrangements.

UK insurance distribution intermediaries generally obtain FCA permission corresponding to their actual business under Part 4A of the Financial Services and Markets Act 2000. Regulated activities may include dealing as agent, arranging insurance transactions, advising on specific insurance contracts, and assisting in the administration and performance of insurance contracts. Specific conduct must be assessed under the Regulated Activities Order and PERG 5, rather than classified solely by the label “broker”.[1] [2] [34]

Intermediaries generally do not themselves bear insurance contract risk. Insurers effecting or carrying out insurance contracts are, in principle, subject to dual regulation by PRA and FCA. Although MGA may quote or bind risks under binding authority granted by an insurer, this does not make it an underwriting insurer approved by PRA if the insurer retains contractual liability.[3]

General insurance and applicable pure protection insurance are primarily subject to ICOBS, while life insurance products with investment features also involve COBS and investment business prudential rules. Insurance intermediary permission does not automatically permit accepting deposits, lending, debt management, providing account information services or conducting other regulated financial business. Premium finance requires separate analysis of credit activities and exclusions.[4] [23] [28]

Market entry may be through direct authorisation, becoming an appointed representative where a suitable principal assumes responsibility, or demonstrating compliance with a strict statutory exclusion. Consumer credit “limited permission” is not a general low-threshold licence for ancillary insurance, and “limited scope” under SM&CR is not another type of insurance licence.[14] [22]

Select the minimum sufficient combination of permissions that lawfully supports the actual business, client scope and financial responsibilities, rather than treating the broadest permissions or fastest approval as the sole objective.

• Direct authorisation allows UK insurance distribution within approved activities and restrictions, with verifiable regulatory status shown on the Financial Services Register. It helps insurers and customers verify the business scope, but is not commercial endorsement by FCA of product quality, investment returns or a consulting firm.[31]

• Brokers, agents, MGA and comparison channels can form different business models within the same insurance distribution framework. Intermediaries can use insurers’ underwriting capacity to serve customer segments, but must establish corresponding product governance, permissions and allocation of responsibilities. Cooperation agreements cannot replace regulatory permission.[3] [16]

• Clear client money and professional indemnity insurance arrangements can reduce risks arising from premium transmission, claims payments and historical sales liabilities. Compliance records also support acquisition due diligence and cooperation with insurers, but UK authorisation does not confer EU passporting rights or automatic market access in other countries.[6] [7]

• Before applying, map the complete process from marketing and customer acquisition, gathering needs, advice or quotations through to policy conclusion and after-sales service, identifying the legal entity performing each step. Explain to FCA how the activities, insurance contract types, customer categories and any geographical restrictions applied for correspond to the business. An already authorised firm adding activities must also check whether VoP is required.[1] [34]

• The applicant must continue to meet threshold conditions including effective supervision, appropriate resources, suitability and a sustainable business model. Complex overseas ownership, reliance on group personnel or critical outsourcing is not automatically prohibited, but the applicant must demonstrate that FCA can obtain information, identify actual decision-makers and supervise the UK business.[1] [14]

• The regulatory business plan must specify target customers, insurance classes, insurer partnerships, sources of commissions and fees, and customer acquisition and distribution strategies. Financial projections must contain reasonable assumptions for business volumes, commission clawbacks, staffing costs, PII premiums and regulatory fees, and test whether sufficient cash remains to maintain customer service if income falls short or a key underwriting partnership ends.[1]

• General insurance sales should first identify the customer's demands and needs and explain how the proposed product meets them. When providing a personal recommendation, the basis for it and analysis linking key exclusions to the customer's circumstances should also be retained. Consumer credit APR, credit scoring and affordability templates cannot replace an insurance needs assessment.[23] [32]

• Customers should be informed promptly of the intermediary’s status, address, how to verify it on the register, whether it provides personal recommendations and whether it represents the customer or insurer. Firms claiming to act on a fair analysis of the market must compare a sufficient, regularly updated range of products and must not select insurers merely for higher commission. Relevant cross-shareholding interests with insurers reaching 10% are also subject to specific disclosure requirements.[23]

• Distributors must understand the product's target market and the product information supplied by the manufacturer, and assess whether their own distribution arrangements, commissions and charges affect customers' receipt of fair value. Intermediaries with substantial product design authority may also be co-manufacturers. The 2025 reforms allow a qualifying insurer or Lloyd’s managing agent to act as the single product governance lead, but do not include ordinary MGA among the entities eligible to act as that lead.[16]

• Where retail customers are involved, the four Consumer Duty outcomes must be implemented: products and services, price and value, consumer understanding, and consumer support. Actual effectiveness must be tested using data on sales outcomes, cancellations or surrenders, complaints, claims support and vulnerable customers, rather than merely stating in a manual that customers are treated fairly. Scope should be determined under current rules; an exclusion for non-UK customers that remains under consultation must not be presented as established fact.[17] [27]

• Operational systems, key personnel and final approved policies must be in place at application, rather than built after licensing. Prepare procedures for complaints, business continuity, data protection, cybersecurity, conflicts of interest, client money and outsourcing monitoring, ensuring they can be implemented from the effective date of authorisation.[31]

• Most general insurance intermediary applications fall within fee category four. As at 2026-11-07, the official amount is £2,820, and the application fee is non-refundable. Mixed or special applications should have their category confirmed according to the actual permissions. Annual FCA fees and potentially applicable FOS and FSCS levies are calculated separately; there is no fixed annual fee range applicable to all intermediaries.[12] [13]

Shareholders and controllers: disclose direct and indirect ownership, voting rights, group structure, joint control arrangements and ultimate sources of funds; do not collect information only on natural persons holding shares directly. Ordinary general insurance intermediaries are non-Directive firms under the control regime, generally subject to a single 20% threshold and the significant influence test. The 10% insurer-related shareholding disclosure rules are a different regime from controller approval thresholds.[20] [21] [23]

Directors and senior management: ordinary professional intermediaries generally fall within Core SM&CR, but sole traders and ancillary insurance intermediaries meeting the conditions for non-core financial business may fall within Limited Scope. Conditions such as intermediary regulated business revenue reaching £35 million on a three-year rolling average may trigger the Enhanced category. Firms should confirm their classification under the current SYSC rather than describing themselves as having 'limited permission' simply because they are small.[14] [15]

SMF and compliance: those actually performing relevant senior management functions must obtain individual approval and maintain statements of responsibilities. Core firms may involve SMF1, SMF3, SMF9, SMF27 and, where applicable under the rules, SMF16 or SMF17. Not every intermediary must simultaneously appoint an independent CEO, a dedicated SMF16 and SMF17, nor does every director automatically require approval. Responsibilities may be combined under acceptable arrangements, subject to capability, time and conflict-of-interest controls.[15]

Certification and training: firms themselves certify persons within the Certification Regime and reassess fitness at least annually, rather than applying to FCA for approval for all customer-facing employees. From 2025-12-09, the uniform minimum of 15 hours of CPD for non-investment insurance staff was removed, but competence and ongoing role-specific training requirements were not abolished. Long-term insurance staff remain subject to at least 15 hours every 12 months and retention of training records for at least three years after leaving their role. Those subject to retail investment adviser rules have separate 35-hour arrangements.[16]

Local substance: UK operations must have a genuine team and business arrangements capable of undertaking decision-making, customer service, compliance monitoring and regulatory communication. The FCA application guidance expressly requires the principal place of business to be specified and notes that serviced offices are generally insufficient. Where key personnel are overseas, arrangements for remote performance of duties, supervision and access to information must be explained, rather than claiming that all shareholders or SMF must invariably be UK residents.[1]

There is no uniform capital figure covering all insurance distribution intermediaries, legal forms and combinations of business. For firms conducting only insurance distribution or mortgage mediation activities without holding related client money or assets, MIPRU 4.2.11 requires capital resources equal to the higher of £5,000 and 2.5% of relevant annual income. Where client money or assets are held, the requirement is the higher of £10,000 and 5% of relevant annual income.[4] [5]

Firms using a CASS 5.4 non-statutory client money trust and holding money for retail customers must continuously maintain capital resources of at least £50,000. The same eligible capital may satisfy both this requirement and the MIPRU capital requirement; £50,000 is not automatically added to £10,000. The trust control, auditor confirmation and informed client consent conditions must also be met.[8]

Regulatory capital is neither the registered share capital recorded by Companies House nor a balance in the company’s bank account. Share capital, reserves and qualifying subordinated financing must be identified under MIPRU 4.4, with goodwill or other ineligible intangible assets and losses deducted. Obligations to maintain sufficient cash and pay liabilities as they fall due apply alongside minimum capital tests; customer premiums cannot serve as the company’s own working capital.[4] [5]

PII is professional indemnity insurance, not underwriting solvency capital that intermediaries must deposit. The current official RMA-E guidance from FCA specifies at least €1,300,380 per claim and an annual aggregate of at least €1,924,560, or 10% of annual income if higher. The income percentage and applicable cap must be calculated specifically under MIPRU 3.2. Where cover is denominated in sterling or another currency, the euro equivalent must be checked at inception and renewal. A high excess may require additional capital, calculated under MIPRU 3.2.[6]

For designated investment business such as investment-based life insurance, first determine whether the firm is a IPRU (INV) personal investment firm or falls within another prudential category, then calculate the combined requirements. The capital framework for personal investment firms ordinarily subject to IPRU (INV) 13.13 uses the higher of £20,000 and the applicable percentage of annual income, which may be 5% or 10% depending on category. Firms also conducting MIPRU business have a combined formula; they must not simply copy the £5,000 for pure general insurance, nor present this framework as a uniform minimum for all life insurance distributors.[4] [5] [28]

A general insurance intermediary application should provide the principal place of business, a UK corporate bank account and the relevant Companies House registration information. If client money will be held, a client money bank account must also be prepared. The registered office, actual business premises and location of management decision-making must be explained separately. A mail-forwarding or shared office address alone is usually insufficient to demonstrate the substance required for regulation.[1]

Overseas groups may assess a UK subsidiary or a suitable branch structure, but branch registration itself does not constitute FCA authorisation. The applicant entity, effective supervision and applicable personnel rules must be confirmed. Rengang Yongsheng (Hong Kong) Limited and Tang Shangyong (Mr Tang) may be named as consulting service brands; their Hong Kong or Shenzhen addresses should not be described as the applicant's UK operating entity or an official FCA contact location.[1] [3]

• Entity and control information: corporate applicants should prepare incorporation certificates, constitutional documents, company numbers, complete ownership and group structure charts, and an explanation of actual control arrangements. Sole traders and partnerships should provide corresponding legal and business information; limited company articles must not be required as a substitute for all entity documents.[1] [5]

• Regulatory business plan and business processes: explain insurance classes, customers, authorised activities, insurer partnerships, sales channels and whether advice is provided, with the commission or charging model attached. MGA should also provide the scope of delegated authority or binding authority, explaining who sets prices, who bears insurance liability and who handles claims.[1] [3]

• Financial and capital evidence: prepare financial forecasts consistent with the plan, recent management accounts or existing financial statements, evidence of funding sources and capital injections, and calculations under MIPRU or other applicable frameworks. Provide a PII policy or implementable underwriting arrangements, with analysis of deductibles and exclusions; if the company has no trading history, do not fabricate three years of audited financial statements.[1] [5] [6]

• Personnel and governance materials: provide senior managers’ curricula vitae, applicable Form A submissions and statements of responsibilities, background checks and regulatory references, and set out the actual governance and reporting structure. The list of certified staff and training and competence assessment procedures must reflect actual roles. Whether a management responsibilities map is mandatory must be determined by the specific category, such as Enhanced.[14] [15]

• Sales and product documentation: prepare customer terms, status and remuneration disclosures, demands and needs records, applicable recommendation explanations, product information documents, marketing materials and digital sales journeys. Also prepare target-market and fair-value evidence and arrangements for information exchange between manufacturers and distributors. Do not mistake SECCI or a representative APR for universal insurance sales documents.[16] [23] [32]

• Client money information: where funds will be held, prepare the trust election, client bank accounts, bank acknowledgements, reconciliation methods, responsible persons and relevant audit arrangements. Where relying solely on risk transfer, provide written agency agreements with insurers and specify whether every stage of premiums, refunds and claims payments is covered; verbal commitments to cooperate are not a substitute.[7] [8] [10]

• Ongoing compliance policies: prepare documentation for complaints and FOS referrals, Consumer Duty monitoring, support for vulnerable customers, conflicts of interest, outsourcing, cybersecurity and business continuity. When conducting long-term insurance business, also prepare AML risk assessments, CDD, ongoing monitoring and suspicious activity reporting arrangements consistent with the scope of MLRs; do not mechanically apply all life insurance AML requirements to intermediaries dealing solely in general insurance.[18] [25] [27]

This is provided as a reference for organising the project; it cannot replace current official application forms or case-specific requests for additional materials. Please do not send identity documents or customer records through website forms.

• The first step is a regulatory scope assessment to determine whether direct authorisation, AR or a statutory exclusion fits the actual sales conduct. Analyse premium finance, claims assistance and overseas customer business separately, and clarify the insurance contract types and client money permissions to be applied for before deciding on the corporate structure.[1] [22] [34]

• The second step is to put governance, banking, substantive operations, financial resources and PII in place, and complete management-approved business plans and policies. Complex or innovative businesses, or those with clear perimeter questions, may use FCA pre-application support, but informal discussions are not advance approval and do not guarantee success in a formal application.[31]

• The third step is to submit the firm application, supporting materials and applicable individual approval applications through Connect, and pay the correct category of application fee. FCA requires applicants to be ready, willing and organised at submission; it will not treat unfinished drafts as a mature application or design the application on the applicant’s behalf.[31] [12]

• Step four: FCA reviews the scope, threshold conditions, finances, personnel and consumer risks, and may raise documentary enquiries or conduct interviews. Responses should provide complete evidence by the specified dates. Material business model changes may require withdrawal and reapplication. No uniform number of enquiry rounds or fixed average approval time can be promised.[31]

• The fifth step, after receiving the approval notice, is to check the effective date, approved activities, contract types, limitations and client money permissions, and verify the Financial Services Register. Regulated sales must not begin during the assessment period unless a clearly applicable exclusion or temporary permission exists. After approval, set up RegData tasks, ongoing PII and a monitoring calendar.[31] [9]

Statutory decision time limits: section 55V(9) of FSMA provides that, where an application for Part 4A permission or VoP relates only to insurance distribution activity, the time limit for a complete application is three months, rather than the general six-month period. For an ordinary complete Part 4A application that includes other activities and does not qualify for this special rule, the time limit is generally six months; an incomplete application must be determined within twelve months of its initial receipt. This must not be described as a uniform twelve-month period for complete insurance applications.[11]

Preparation and regulatory periods should be budgeted separately. Applications with mature organisations, personnel and well-developed insurer cooperation may allow around three to six months in project planning to prepare business plans, policies and systems. This is only a consulting project budgeting reference, not an official processing period or a promise of licensing within three to six months.[31]

The general six-month explanation for FSMA on the FCA webpage cannot override the specific legal rules for insurance distribution, and enquiries do not mean that an application will necessarily be approved. Record the dates on which FCA receives materials and confirms completeness, and manage firm approval, SMF individual approval and acquisition-related change in control approval as separate processes; they must not be combined into a single guaranteed delivery date.[31] [11] [20]

Changes in control: general insurance intermediaries are usually non-Directive firms. Acquiring 20% or more of the shares or voting rights in the company or its parent, or acquiring significant influence, may trigger Section 178 notification and prior approval. This category has only one 20% control band. Increases or decreases within that band do not generally trigger a further threshold-crossing application, but relinquishing control still requires prior notification. Where other permissions are also held, recheck the classification rather than applying insurers' tiered thresholds.[20] [21]

The statutory assessment period for a complete change in control notification to FCA is 60 working days, excluding lawful interruptions for additional information. Transaction agreements should make the required regulatory approvals conditions precedent to completion. Intra-group transfers, nominee holdings, joint investments and passive increases in holdings caused by inaction must also be checked; parties must not complete first on the grounds that the existing licence remains unchanged.[20]

Changes in directors and SMF: those performing SMF requiring individual approval should obtain approval before taking up the role. Departures, changes in responsibilities or fitness and propriety events must be notified using the applicable forms and deadlines. Form C concerns the departure of approved persons, not an application to acquire control; changes in ordinary non-SMF directors should also be checked for Companies House, governance and FCA notification obligations.[15] [20]

Changes to the business or funding model must be checked against existing permissions. For example, adding investment-based life insurance, moving from risk transfer to holding client money, or expanding into new regulated activities may require VoP. Changes to the types of activity of AR generally require at least 10 calendar days' advance notice, while other information changes are normally updated within 10 working days after the change. These deadlines should not be applied to all changes at directly authorised firms.[10] [22]

Regulatory reporting: applicable institutions submit the relevant RMAR sections through RegData, including financial, capital, PII and client money data. FCA currently states that most sections are submitted at least twice yearly, generally based on the accounting reference date and within 30 business days. Institutions must follow their actual assigned sections and reporting schedules; the former Gabriel system or Connect must not be described as the platform for all periodic reporting.[9]

Audits and client money: general insurance intermediaries holding money under a non-statutory trust normally need an external client money audit; a statutory trust exceeding £30,000 at any point during the audit period will also normally trigger one. The audit reporting period should generally not exceed 53 weeks, and the report must be sent to the firm within four months after the relevant period-end. This does not mean that all small intermediaries must submit annual financial statements to FCA within four months; statutory financial statement audits and company filing obligations require separate assessment.[10]

Client money controls: CASS 5 requires appropriate segregation, due diligence on banks and third parties, accurate records and regular reconciliations, with client money calculations at least once every 25 business days and more frequently where risks are higher. Shortfalls must be made good promptly under the rules; inability to calculate or replenish them promptly requires immediate notification to FCA. Risk transfer still requires transaction-by-transaction verification of agency scope and retention of written agreements; commission on premiums not yet received must not be withdrawn in advance from the trust.[7] [8] [10]

AML and financial crime: provision 10(2)(f) of MLRs covers insurance intermediaries carrying on business in relation to long-term insurance contracts; pure protection products are not automatically exempt merely because they have no investment value. Intermediaries dealing only in general insurance do not automatically fall within the same MLR financial institution scope by virtue of that status, but must still comply with applicable crime prevention, sanctions and systems and controls requirements. Where other financial activities are involved, the scope must be checked separately; it is incorrect to state broadly that all intermediaries must appoint a SMF17.[18] [19]

Consumers and personnel: firms subject to Consumer Duty must have their governing body review and approve a customer outcomes report at least annually, confirm compliance status and future strategy, and implement remedial action. Training requirements differ between long-term insurance and non-investment insurance. Certified staff must be recertified annually under the applicable regime, whereas SMF approval itself does not require annual reapplication. Complaints must be acknowledged promptly in writing, with a final response or a response in the prescribed form usually provided within eight weeks, explaining FOS rights.[15] [16] [25] [27]

Ongoing product governance and regulatory fees: the 2025-12-09 reforms remove the fixed minimum frequency of product reviews at least every 12 months for non-investment insurance, instead requiring appropriate intervals to be determined by risk and potential customer harm, with the rationale retained. Annual FCA fees, PII renewal, and applicable FOS and FSCS levies must all be budgeted for. After business ceases, arrangements must also cover historical liabilities, customer records, outstanding premiums and claims servicing; the website and customer contact channels cannot simply be shut down.[6] [12] [16]

First check the target company’s exact permissions, client money permissions, product restrictions and regulatory status, then examine whether its actual business has persistently exceeded its permitted scope. A share acquisition may preserve the same legal entity’s authorisation, but is not the free purchase and sale of a licence. Buying assets or moving business into another entity generally does not transfer the original permissions; the transferee’s permissions, contracts and customer transfers must be assessed separately.[1] [20]

Distinctive assets of insurance intermediaries include underwriting partnerships and distribution contracts. Check whether arrangements with insurers, wholesale brokers, MGA binders or Lloyd’s coverholders contain change-of-control termination or consent clauses. Also check entitlement to renewal income, commission clawbacks, unearned commission, liabilities for policies already sold and concentration among principal underwriters, rather than valuing a client book solely on accounting profits.[3] [16]

Client money due diligence must reperform reconciliations between trust and insurer accounts, identifying premiums, refunds, claims payments and insurer receivables unmatched for years, as well as gaps in risk transfer across upstream and downstream chains. Non-statutory trusts may include receivables from credit advances to customers or insurers, whose recoverability should be verified. Trust balances or customer receivables must not be counted as free cash deliverable to the seller.[7] [8] [10]

Historical sales liabilities should cover unsuitable recommendations, double charging, support for vulnerable customers, buildings insurance or other multi-party policy benefit arrangements, and FOS complaints and potential redress obligations. For PII, verify retroactive dates, exclusions, excesses, change-of-control clauses and run-off cover, rather than checking only the current year’s insurance certificate. Transaction funding sources, buyer governance and future effects on the business should be included in the change-of-control application.[6] [20] [27]

The following are specific permissions, organisational models or statutory categories covered by this topic. They do not necessarily each constitute a separate financial licence.

Primarily based on FCA, PRA / Bank of England, GOV.UK and current legislation. Older third-party guides supplied by users are used to organise business material and do not override the latest official requirements.

Information compiled by: RenGang Yongsheng (Hong Kong) Limited

Tang Shangyong (Mr Tang / Drew) · Business Manager
Global financial licence application, transaction and ongoing compliance services

Contact the author and enquire about projects