FCA Authorisation vs Registration: What Is the Difference

FCA authorisation and FCA registration are distinct regulatory statuses that apply to different types of firm and carry materially different obligations — and confusing the two can result in a firm either over-engineering its regulatory approach or, more seriously, operating outside the regulatory perimeter.

The majority of regulated firms are familiar with FCA authorisation — the permission to carry on regulated activities under FSMA. Registration is less well understood, but applies to a significant number of businesses: payment firms below certain thresholds, alternative investment fund managers below AIFMD thresholds, and cryptoasset businesses not yet subject to full FCA authorisation. Understanding which status applies and what it requires is the starting point for any firm determining its regulatory obligations.

FCA Authorisation: What It Is

FCA authorisation under Part 4A of FSMA is the primary regulatory status for firms carrying on regulated activities — investment management, dealing in investments, advising on investments, operating a collective investment scheme, consumer credit, and other activities specified in the Regulated Activities Order. An authorised firm holds a specific set of permissions covering each regulated activity it is permitted to carry on, and is subject to the FCA Handbook rules — including conduct requirements, capital requirements, SMCR and AML obligations — applicable to those activities.

The authorisation process involves a full assessment of the firm against the threshold conditions, individual FCA approval of all SMF holders, and ongoing FCA supervision. The FCA can vary, restrict or cancel an authorised firm’s permissions, impose requirements, and take enforcement action — up to and including prosecution under FSMA.

FCA Registration: What It Is

FCA registration is a lighter-touch regulatory status that applies to specific categories of firm that fall within a regulatory perimeter but below the threshold for full authorisation. The key registration categories are:

Small payment institutions (SPIs) — payment service providers whose average monthly payment transaction volume does not exceed €3 million. SPIs are registered rather than authorised under the Payment Services Regulations, face lower capital requirements and a simplified application process, but must still comply with PSR conduct requirements and safeguarding obligations.

Small e-money institutions (small EMIs) — e-money issuers whose average outstanding e-money does not exceed €5 million and which do not provide third-party payment services beyond their own e-money. Small EMIs are registered rather than authorised under the Electronic Money Regulations.

Below-threshold AIFMs — AIFM firms below the AIFMD authorisation thresholds (typically less than €100m AUM, or €500m for unleveraged closed-ended funds with no redemption rights for five years) can register with the FCA as a registered small AIFM rather than seeking full authorisation.

Cryptoasset businesses — businesses carrying on cryptoasset activities must register with the FCA under the Money Laundering Regulations, demonstrating AML compliance. This registration is separate from and less demanding than full FCA authorisation, but is a legal requirement for all UK cryptoasset businesses regardless of whether they hold FSMA permissions.

Key Differences in Obligations

SMCR. Full SMCR — including the Senior Managers Regime, Certification Regime and Conduct Rules — applies to authorised firms. Registration-only firms are not subject to SMCR in the same way: they are typically subject to a more limited set of conduct obligations rather than the full SMF approval and accountability framework.

Capital requirements. Authorised firms are subject to the full regulatory capital requirements applicable to their activity type. Registered firms face either reduced minimum capital requirements (for SPIs and small EMIs) or no regulatory minimum capital requirement (for below-threshold AIFMs and cryptoasset-registered firms, though the FCA expects adequate financial resources in all cases).

FCA supervision intensity. Authorised firms are subject to the FCA’s full supervisory framework — including thematic reviews, supervisory visits, data reporting and the full range of supervisory and enforcement tools. Registered firms receive a lighter supervisory touch, though the FCA retains the ability to cancel registration and take action where conduct failures are identified.

Permitted activities. The most significant practical difference for growing firms is that registration typically imposes volume or AUM limits that do not apply to authorised firms. A payment firm that exceeds the SPI threshold must upgrade to full API authorisation. An AIFM that grows above the AIFMD threshold must seek full authorisation. The transition creates a regulatory cliff edge that growing firms need to plan for carefully.

Upgrading from Registration to Authorisation

The transition from registered to authorised status is a full authorisation application — not a simplified upgrade process. A firm that has been registered as an SPI and wishes to grow beyond the SPI threshold must submit a complete authorisation application to become an API, including a new regulatory business plan, financial projections, governance documentation and SMF approval applications. The timeline for this transition should be planned well in advance of the threshold being reached: a firm that exceeds its registration threshold without authorisation is, for that period, operating outside its regulatory permissions.

The practical implication for fast-growing payment or e-money businesses is to begin preparing the authorisation application when the firm is on track to reach the threshold — not when it has already exceeded it. A compliant transition typically takes three to six months from the point of a complete application submission, which means preparation should begin at least six to nine months before the threshold is expected to be reached.

Appointed Representatives: A Third Category

Appointed representatives (ARs) are a third category distinct from both authorised and registered firms. An AR operates under the authorisation of a principal firm — the FCA-authorised firm that has appointed them and takes regulatory responsibility for their regulated activities. ARs are not themselves authorised or registered, but they can carry on regulated activities within the scope of their appointment with the principal. The principal’s obligations in relation to ARs are extensive: they must ensure ARs meet conduct standards, oversee their financial promotions, monitor their regulatory compliance, and maintain a Management Responsibilities Map that accounts for AR oversight.

Key References

• FCA — Authorisation and registration guidance
• FCA Financial Services Register — check status of firms and individuals
• Financial Services and Markets Act 2000