FCA Authorisation Timeline: Realistic Expectations for Payment Firm Applications in 2026

The FCA authorisation process for payment firms and EMIs has a statutory deadline of three months for a complete application, but in practice most applications take considerably longer. Understanding the realistic timeline, and more importantly what drives delays, is essential for any business planning to apply for authorisation as an Authorised Payment Institution (API), Small Payment Institution (SPI), Authorised EMI, or Small EMI. Planning around an optimistic timeline is one of the most common — and costly — mistakes made by applicants.

Statutory Deadlines vs Reality

Under the Payment Services Regulations 2017 (PSRs 2017) and Electronic Money Regulations 2011 (EMRs 2011), the FCA must determine a complete application within three months of receipt. However, the clock only runs on a "complete" application — and the FCA has significant discretion in determining when an application is complete. Where additional information is requested, the three-month clock stops until the information is received. In practice, this means the statutory deadline provides limited protection against extended review timelines.

The FCA's published target for payment firm authorisations is to determine 90% of complete applications within 12 months. In practice, for complex applications — particularly those involving high-risk business models, new technology, or applicants without prior FCA-regulated experience — the timeline from initial submission to authorisation decision is frequently 12-18 months. For applications involving novel elements (crypto services, complex offshore structures, or business models that don't fit neatly into existing regulatory categories), 18-24 months is not uncommon.

The Application Stages

Pre-Application (1-3 months)

The FCA strongly encourages pre-application engagement for complex firms. The Authorisations Department operates a pre-application meeting process through which applicants can discuss their business model with case officers before submitting. This is particularly valuable for businesses in novel areas — crypto, DeFi-adjacent models, or complex multi-jurisdiction structures. Pre-application meetings are not binding, but they allow applicants to identify potential objections early and address them before submission. Skipping this step, or rushing it, frequently results in extensive information requests after submission.

Application Submission and Initial Review (1-3 months)

Applications are submitted through the FCA's Connect portal. Following submission, the application is assigned to a case officer who conducts an initial review. During this phase, the FCA will issue a completeness assessment — identifying any mandatory fields or documents that are missing or insufficient. This phase commonly generates the first round of information requirements (IRs), which pause the statutory clock. The quality of the initial application pack is the single biggest determinant of how quickly this phase completes.

Substantive Review (3-12 months)

Once the application is assessed as complete, the substantive review begins. The case officer will assess the business plan, financial projections, regulatory capital calculation, safeguarding arrangements, AML/CTF framework, governance structure, and fitness and propriety of approved persons. Each of these areas may generate further IRs. The FCA also conducts criminal records checks and, in some cases, financial intelligence queries on key individuals. Complex ownership structures, particularly those involving offshore holding companies, BVI SPVs, or nominee arrangements, consistently generate significant case officer attention and extend review timelines.

Decision and Conditions (1-2 months)

Where the FCA is minded to authorise, it will issue a minded-to-authorise letter, often with proposed conditions or requirements. The applicant has an opportunity to respond before the formal authorisation is granted. Conditions commonly include: requirements to appoint a named MLRO before trading; requirements to maintain minimum capital at a specified level above the regulatory minimum; or requirements to submit specified reports within a defined period after authorisation. Failure to negotiate unworkable conditions at this stage can create ongoing compliance challenges.

Common Causes of Delay

• Inadequate AML/CTF framework: The FCA's Authorisations Department has significantly increased its focus on financial crime controls since 2021. Applications that lack a detailed, business-specific AML policy, or where the proposed MLRO lacks demonstrable experience, consistently generate extended review.
• Complex ownership structures: Ultimate beneficial ownership through multiple offshore layers generates significant case officer resource. Every layer must be explained and evidenced — certificates of incorporation, share registers, trust deeds where applicable, and passports/proof of address for all natural persons with 25%+ ownership.
• Undercapitalised applicants: Applications where the initial capital is marginally above the regulatory minimum, without a credible explanation of how the business will remain solvent during the period to profitability, are frequently queried or rejected.
• Unclear business models: The FCA is not a venture capital investor — it does not authorise businesses on the basis of potential. It authorises businesses whose actual proposed activities are clearly defined and clearly fall within a regulated activity category. Vague or aspirational business plans are a common reason for extended information requests.

Practical Preparation Advice

Applicants should invest significantly in pre-submission preparation: engage experienced regulatory compliance advisers; draft the full application pack before booking a pre-application meeting; ensure all UBOs are identified and documentation is compiled; and have a credible, named MLRO with relevant experience committed before submission. The quality of preparation is directly correlated with application speed. A well-prepared application from a straightforward business model can achieve authorisation in six to nine months. A poorly prepared application from a complex business may take two years.