Business scope and permission boundaries
Genuine business-purpose buy-to-let loans or commercial property mortgages may fall outside the ordinary scope of RMC or CBTL, but must satisfy specific statutory exclusions. Residential bridging loans are not exempt from licensing merely because they are short-term. The secured land, residential proportion, borrower, contractual purpose and CBTL bridging-loan exclusion must each be analysed; labels such as ‘commercial’ or ‘bridging loan’ cannot replace a conclusion.[4] [19]
Application value and choice of route
Select the minimum sufficient combination of permissions that lawfully supports the actual business, client scope and financial responsibilities, rather than treating the broadest permissions or fastest approval as the sole objective.
A directly authorised intermediary can establish its own residential mortgage advice, arranging and customer service arrangements within its approved permissions and lender partnerships. Authorisation itself does not guarantee access to every lender’s broker panel or mean that every product on the market can be recommended; charges and product scope must still be clearly disclosed to customers.[2]
Non-bank home finance providers may conduct regulated lending or lifetime mortgage business within their approved permissions using a funding model that does not involve accepting deposits. FCA examines not only application forms but also funding sources, solvency, liquidity under stress and fair lending services. Authorisation therefore cannot replace funding facilities or confer PRA banking permissions.[3] [5] [6]
Third-party administration permission can support loan portfolio servicing, migration of existing accounts and ongoing administration after securitisation. Borrower interest rate notices, arrears handling and complaints arrangements may be carried out by specialist servicing teams, but the responsible entity and backup servicing arrangements must be clearly identified. Outsourcing cannot release the authorised institution from responsibility for customer outcomes.[21]
Application conditions and entry requirements
Retain supporting evidence of business purpose and use of security to prevent residential consumer loans from being labelled as corporate or commercial loans merely on paper. If the firm still provides regulated advice, arranging, lending or other credit activities, it should apply for the corresponding permissions. The bridging loan proposal of CP26/18 2026 must not be treated as a relaxation already in force.[4] [19] [26]
Shareholders, directors and key personnel
Shareholders and controllers need to disclose ultimate beneficial ownership, group structure, sources of funds and material regulatory or integrity matters; there is no general prohibition on foreign shareholders for this topic. FCA assesses fitness, effective supervision and resources; foreign status, existing debt or historical disciplinary action cannot be reduced to automatic approval or rejection. Business-related matters such as previous removal from a lender panel must be disclosed truthfully.[2] [3] [16]
Directors and executives must be able to explain the specific products, fund flows and compliance controls. The persons actually performing applicable Senior Management Functions must apply for approval. Ordinary corporate intermediaries are generally assessed under the Core regime, while sole traders fall within Limited Scope; being a small company does not automatically confer that classification. A sole trader without employees is not personally within the employee certification regime and does not automatically require SMF29.[15]
Employee certification and FCA senior manager approval are separate processes. The firm assesses fitness and propriety for applicable certification functions; mortgage advisers must not all continue to be labelled as requiring FCA CF30 approval. Enhanced firms also have additional governance obligations. Currently, a non-bank lender or administrator with at least 10,000 outstanding regulated mortgages, or an intermediary with three-year average regulated revenue reaching GBP45 million, among other criteria, may trigger Enhanced classification. Responsibilities maps must not be presented as a universal obligation for all small intermediaries.[14] [15]
The compliance lead must have sufficient knowledge, authority and time. Part-time or outsourced arrangements do not relieve directors of responsibility, and whether SMF16 and SMF17 are required depends on the firm's permissions and applicable rules. UK local substance centres on central management and control, access to records and supervisability. There is no general requirement that all directors be UK citizens or that every intermediary employ a fixed number of local directors.[13] [15] [30]
Capital and financial resources
Business confirmed to be entirely outside the regulated scope of this topic does not thereby create a separate ‘minimum capital for a commercial mortgage licence’. However, entities combining regulated and unregulated business must still include the relevant assets, income and financing in applicable capital and resource analyses; it cannot be claimed that all unregulated business has no effect on solvency.[5] [6]
Registered office and operational substance
UK-registered companies must meet applicable registered office and head office location requirements; the location of central management and control matters more than a mere mail-receiving address. FCA assesses each case by reference to directors’ decisions, business oversight and the location of personnel and records. A mail-forwarding address alone cannot demonstrate UK substance for regulated activities. Remote working is not automatically prohibited, but effective supervision and regulatory access to information must be possible.[13]
This topic may be prepared by Ren Gang Yong Sheng (Hong Kong) Limited / Tang Shangyong (Mr Tang), who may provide application preparation consulting. Brand information must be clearly separated from the UK applicant entity. The Hong Kong and Shenzhen contact addresses listed on the original webpage are user-provided commercial information, not UK offices approved by FCA, and must not be used to claim that local UK business has been authorised or to promise a successful application.[1]
Application document checklist
A regulatory business plan and permissions list explaining, item by item, the choices concerning advice, arranging, lending, administration and CBTL registration, with actual customer journeys attached. The scope of services, including first-charge, second-charge, refinancing and lifetime mortgages, should be listed, explaining which activities are undertaken by the institution and which by lenders, the principal or administration service providers.[2] [3] [19]
Entity formation and governance documents, including applicable company certificates, articles, ownership and group structure charts, and ultimate beneficial ownership and controller information. Sole traders and partnerships should submit their corresponding identity and organisational documents; applicants should not be assumed to be a Ltd or LLP merely to fit a template.[12] [13] [16]
The applicable Form A and statement of senior management responsibilities, together with employment history, qualifications, work experience and full historical disclosures. Adviser qualifications, supervision records and competence assessments should be established separately; not every adviser’s documents should be treated as an application for FCA senior manager approval. Any previous removal from a lender’s or product provider’s panel should be explained in the application.[2] [3] [14] [15]
At least three years of financial projections, capital resources calculations and stress testing are required; non-bank providers need to clearly present all three financial statements under stress scenarios. Evidence of funding should explain the terms of shareholder capital injections, warehouse financing or other funding channels. Existing businesses may include actual accounts and financial records; new companies cannot uniformly be required to submit two years of historical audited accounts.[3] [5]
The applicable professional indemnity insurance policy, or proposed cover documentation with clear underwriting terms, specifying products, insured parties, AR, historical business, and per-claim and aggregate limits. Include an analysis of excesses and exclusions and check whether additional capital is required. A broker’s quotation merely stating ‘meets FCA requirements’ is insufficient.[7] [8]
Client agreements, fee and commission disclosures, product and sales documents, sample advice records, and policies for handling complaints and vulnerable customers. Lenders and administrators must also prepare account notices, arrears and forbearance measures, loan migration and service cessation plans, demonstrating that procedures can actually be implemented rather than merely stating objectives.[2] [3] [21] [27]
IT, data protection, business continuity and outsourcing information demonstrating customer record retention, access rights, online customer acquisition and service interruption controls. Financial crime documents should be prepared separately according to whether the business falls within MLRs and the relevant FCA rules. Pure mortgage intermediaries and lenders cannot invariably use the same statutory MLRO and due diligence checklist.[3] [21] [30]
A firm proposing to act as AR should obtain the principal's written agreement, the proposed scope of appointment and its due diligence and oversight arrangements, rather than independently submitting a separate “AR licence application”. When acquiring an existing firm, also prepare the buyer's control structure, funding sources, business plan and applicable control application documents, and make FCA consent a transaction condition.[16] [17] [18]
This is provided as a reference for organising the project; it cannot replace current official application forms or case-specific requests for additional materials. Please do not send identity documents or customer records through website forms.
Application process and key steps
Assess the business perimeter before incorporation and quotation, identifying whether customers are individuals or trustees, the proportion of residential security, purpose and contract dates. Provide separate conclusions on Part 4A permissions, CBTL registration or statutory exclusions available for reliance. Do not treat 'commercial lending', 'introductions' or 'execution-only' as automatic licence exemptions.[4] [19] [21]
Determine whether DA, AR or another structure applies, and put in place key personnel, adviser capabilities, UK substance and financing arrangements. Institutions planning to become lenders must establish lending and administration responsibilities. Moving from intermediary to lender usually involves a variation of permission; an existing brokerage track record does not itself permit new activities.[2] [3] [13]
Complete the regulatory business plan, financial information and relevant forms in accordance with the dedicated FCA application guidance, explaining point by point how the threshold conditions will be met on an ongoing basis. Before submission, internally check the consistency of customer scenarios, disclosures and fund flows, with particular attention to personnel history, capital calculations and professional indemnity insurance coverage.[2] [3] [5]
Applications for direct authorisation are submitted through Connect with a non-refundable application fee. In the updated 2026-07-02 fee schedule, mortgage broker applications fall within category 4, GBP2,820, and non-bank home finance providers and third-party administrators within category 6, GBP11,260. Where other activities are sought simultaneously, the actual fee rules must be applied, rather than budgeting on the original guide’s “approximately GBP2,500”.[2] [3] [9]
FCA conducts completeness and substantive reviews, may request additional documents or raise questions about personnel or the business model, and decides whether to approve on a case-by-case basis. Upon receiving the written decision, check the effective date, permission restrictions and additional requirements. Only business that meets the conditions may commence; submission of an application, payment of fees or receipt of a company number must not be treated as a substitute for authorisation.[10] [11]
After approval, establish RegData and My FCA task management, applicable reporting and regulatory fee arrangements, and update controls based on customer outcomes. For AR, the principal must notify FCA at least 30 days before the appointment takes effect and provide ongoing supervision. CBTL registration and lender panel admission must be completed under their respective regimes and cannot be treated as automatic consequences of DA approval.[18] [19] [23]
Approval deadlines and project timelines
The statutory decision deadlines for mortgage Part 4A applications derive from section 55V of FSMA: six months from receipt of a complete application by FCA, and no later than twelve months from receipt of an incomplete application. “Complete” here means that the regulatory application information is sufficient, not merely that the mandatory Connect fields have been filled in. These are decision deadlines, not guaranteed approval deadlines, and the special three-month rule for insurance-distribution-only applications does not apply.[10] [11]
Preparation must be listed separately. It includes preparing the business perimeter, personnel, qualifications, capital, PII and system information, with no uniform statutory duration. Commercial plans may allow around two to four months for simple intermediaries with existing capabilities and around four to nine months for new non-bank lending or administration businesses. These are merely planning assumptions used in this material, not FCA statistics, service commitments or a fast track. Additional time should be allowed where qualifying examinations or funding remain outstanding.[2] [3]
Due diligence and contracting for AR do not have the same statutory six- or twelve-month approval period as DA. The principal's requirement to notify at least 30 days in advance is separate and does not guarantee commencement on day 31. CBTL registration follows its own procedure, rather than mechanically applying Part 4A time limits. Complete notifications involving acquisitions of control have a separate 60-business-day assessment framework with possible interruptions, which must be planned separately from business authorisation.[17] [18] [19]
Changes to shareholders, directors and permissions
Changes in control must be identified before a transaction is implemented, rather than notified only after share completion. Non-Directive home finance firms generally have a single 20% control threshold, with parent company holdings, voting rights and significant influence also checked. Directive entities such as banks have separate bands of 10%, 20%, 30% and 50%; 10% must not be described as a uniform threshold for all mortgage firms.[16] [17]
The buyer must apply for prior approval under the applicable regime. The institution and seller also have corresponding notification duties, and the agreement should make regulatory consent and attached conditions conditions of completion. Authorisation belongs to a specific entity, not a separately transferable commodity. Acquiring assets or a customer portfolio does not automatically transfer the seller’s permissions to the buyer. Even when purchasing only loan receivables, it is necessary to check whether the buyer enters into, varies or actually administers contracts, and whether the exclusion for administration by an authorised person applies.[17] [21]
Replacing directors, changing persons performing SMF and employee certification are three separate matters. Entry of a new director in Companies House records does not automatically confer applicable senior management approval. SMF requiring approval must follow the rules for Form A and changes in responsibilities; departures and related responsibility changes also require the corresponding notifications. For AR, the principal must also reassess its senior management and material business changes, rather than merely updating contacts.[15] [18]
Ongoing compliance and annual maintenance
Continue checking actual use and product changes, preventing regulatory perimeter drift where commercial and consumer customers are mixed. Contract migration or renewal may change the original conclusion; retaining case-by-case analysis is more important than generic claims of licence exemption.[4] [19]
Acquisition due diligence and transaction considerations
When acquiring an intermediary, first verify the exact entity, permissions and restrictions on the Financial Services Register, distinguishing DA, AR, CBTL registration and lender panel eligibility. AR network relationships may lapse following a change of control or termination of an agreement. A FCA number alone does not demonstrate that the target can independently advise, lend or administer. Check whether customer acquisition channels have ever presented arranging as licence-exempt introductions.[2] [18] [19]
Reassess a sample of historical advice, focusing on debt consolidation, early repayment charges, comparisons between second-charge mortgages and refinancing, repayment in retirement and equity release suitability. Check complaints, FOS matters, customer redress, commission conflicts, removal from lender panels and regulatory correspondence, and confirm whether PII covers historical transactions, departed AR and post-acquisition run-off or renewal, rather than looking only at the current level of cover.[2] [7] [27]
When purchasing a loan portfolio or management company, also confirm original contract dates, first- or second-ranking security, legal assignment and on-balance-sheet treatment; valuation must not rely solely on book balances. Capital calculations should distinguish loans before and after 2014-04-26 and subsequent increases or variations. Check warehouse or securitisation funding covenants, recourse and credit enhancement, and whether interest rates, payments, arrears and customer data can be migrated completely.[5] [6] [21]
A loan purchaser does not necessarily engage in new lending merely by acquiring a debt, but actual contract administration and new or varied contracts still require a fresh permissions analysis. Structures relying on an exclusion through an authorised administrator under article 62 or 63 of RAO must confirm that the agreement is effective, the administrator has sufficient permissions and backup administration arrangements exist. The one-month transition after the relevant administration arrangements end is not a long-term window for unlicensed services.[21]
View the complete process for acquiring a licensed companyBusiness segments and applicable regimes
The following are specific permissions, organisational models or statutory categories covered by this topic. They do not necessarily each constitute a separate financial licence.
Frequently asked questions
Can mortgage business begin once a UK company number has been obtained?+
No. Incorporation registration with Companies House and business authorisation by FCA are different regimes. Activities requiring Part 4A permission may commence only once written authorisation takes effect and the permissions and requirements are satisfied. An AR must be validly appointed and operate within the scope for which the principal accepts responsibility. Neither submitting an application nor paying fees replaces these conditions.[10] [11] [18]
Why are both GBP5,000 and GBP100,000 shown as minimum capital?+
GBP5,000 is the minimum comparator in the formula for qualifying intermediary-only firms without client assets, while GBP100,000 applies to the corresponding home financing or administration formula. Both must also be compared with calculations based on income, risk-weighted exposures or adjusted assets, with mixed permissions checked; they are not two licence price tiers that firms may freely choose between.[5] [6]
Have professional indemnity insurance limits changed to sterling?+
As of the verification date, this material uses the current MCD intermediary EUR460,000/EUR750,000 expressly listed in MIPRU and the official consultation in 2026, rather than the different generic coverage amounts in the original guide. CP26/22 proposes a conversion to GBP390,000/GBP640,000, but the public topic page still shows the consultation stage; the proposed amounts must not be claimed to be in force. Final rules and transitional arrangements must be checked again when taking out or renewing insurance.[7] [8]
Do all directors and mortgage advisers require CeMAP and FCA CF30 approval?+
No. Qualification requirements depend on the actual advice and product activities; directors and shareholders do not all require CeMAP merely because of their status. FCA approval of SMF personnel, firm certification of applicable staff and adviser competence assessments must be handled separately. Older guidance labelling all advisers as CF30 and applying 35 hours of investment-adviser CPD is inaccurate.[14] [15] [29]
What is the difference between consumer buy-to-let and business buy-to-let?+
An important condition of CBTL is that the borrower is not borrowing wholly or predominantly for business purposes; residential security and letting agreement conditions must also be satisfied. Genuine business-purpose BTL may fall outside this registration regime, but not all letting loans are unregulated, nor are all individual landlords necessarily consumers. Case-by-case purpose and contract analyses must be retained.[19] [20]
Are execution-only services or pure introductions always exempt from authorisation?+
No. Removing advice does not automatically eliminate arranging activities; the actual customer journey and degree of involvement are central to the assessment. Pure introductions, CBTL introductions and IAR each have their own conditions. Where a business selects loans for customers, progresses applications towards completion or provides personal recommendations, it cannot continue to claim an exemption merely by calling itself a ‘referral platform’.[2] [19] [18]
Is the minimum capital for a third-party mortgage administrator always GBP100,000?+
For pure administration where all contracts are off balance sheet, the requirement is the higher of GBP100,000 and 10% of annual income, so large servicers may face requirements far above GBP100,000. Any on-balance-sheet contracts must be treated under the corresponding provider formula; this amount must not be presented as fixed capital for all administration companies.[5]
Can the seller’s authorisation be used directly when buying a company or loan portfolio?+
A company share acquisition must address the control regime. Authorisation remains attached to the original legal entity, rather than being a certificate that can be bought and sold separately. An acquisition of assets or a loan portfolio does not automatically transfer permissions. Whether the buyer enters into, varies or administers contracts, and whether the exclusion for administration under authorisation applies, must be analysed separately. An acquisition of AR also requires checking whether the principal continues to accept responsibility.[16] [17] [18] [21]
Must a shareholder in a mortgage firm always apply for control approval upon reaching 10%?+
Non-Directive home finance firms are generally subject to a single control threshold of 20%, with parent undertakings and significant influence also taken into account, rather than a uniform 10%. Directive firms such as banks are subject to a different set of bands. Significant influence may trigger the regime even below the numerical shareholding threshold, so the target's permissions and structure should be assessed before completion.[16]
Do all firms require AML registration, SMF17 and an annual audit?+
Pure mortgage brokers do not automatically fall within MLRs merely through broking. Lenders and concurrent activities require separate assessment, but brokers must still prevent financial crime and comply with applicable law. Annual audit requirements must also be checked separately against company law, the nature of the institution and FCA requirements. Neither old small-company thresholds nor a blanket statement that “all financial institutions require audits” is sufficient.[22] [30]
Can UK loans not exceed 4.5 times annual income?+
The 4.5 multiple is the relevant policy classification for high loan-to-income lending, not a universal absolute lending cap for every borrower. The 2026-10-28 PRA/FCA policy removed the uniform individual-institution 15% cap on high LTI lending for relevant institutions while retaining the system-wide 15% framework. Institution-level flexibility and monitoring are governed by the new policy; this does not waive customer affordability or other lending rules.[25]
Can FCA public market figures substantiate the intermediary count and 70% market share in the original guide?+
No. The latest quarterly FCA data directly verifiable in this review are residential loan balances of GBP1,760.6 billion, advances of GBP77.4 billion and new commitments of GBP79.2 billion for the second quarter of 2026. These data come from lending and administration returns and cannot establish approximately 5,000 intermediaries, 15,000 AR or a 70% broker channel share. These items in the original guide lack sufficient up-to-date official evidence on a consistent basis and are therefore not published as facts.[1] [24]
Official basis and verification sources
Primarily based on FCA, PRA / Bank of England, GOV.UK and current legislation. Older third-party guides supplied by users are used to organise business material and do not override the latest official requirements.
Tang Shangyong (Mr Tang / Drew) · Business Manager
Global financial licence application, transaction and ongoing compliance services