Many firms struggle with the same core challenges: choosing the correct authorisation route, preparing the extensive governance and anti-money laundering (AML) documentation, demonstrating sufficient financial resources, and correctly safeguarding customer funds. Estimating the full cost and timeline, from initial planning to final approval, can also be a significant hurdle.
This guide breaks down the requirements for operating as a payment service provider in the UK. We’ll cover the different types of authorisation, the roles of the key regulators, the detailed application requirements, and the ongoing obligations you’ll face after approval.
Disclaimer: This article provides a general overview for informational purposes only and does not constitute legal or regulatory advice. You should always consult with specialist UK regulatory and legal advisors for guidance on your specific business model.
Key Takeaways
- The correct UK authorisation depends entirely on the services you offer, such as money remittance, payment execution, merchant acquiring, or issuing electronic money (e-money).
- For most non-bank payment firms, the Financial Conduct Authority (FCA) is the primary regulator responsible for authorisation and supervision.
- A successful application requires far more than just a company registration; it demands a viable business plan, robust financial forecasts, clear governance structures, and detailed risk, compliance, and operational policies.
- The total cost involves more than the official application fee. You must also budget for regulatory capital, professional advice, technology, safeguarding arrangements, and ongoing compliance.
What UK Authorisation Does a PSP Need?
In practical terms, a payment service provider (PSP) is any business that facilitates regulated payment services for customers. If your business model involves handling customer funds to make payments, you will likely need authorisation or registration from the FCA before you can legally operate in the UK.
That authorisation requirement rarely comes labelled as a single "PSP licence" — the term is a commercial shorthand, not a formal regulatory category. The UK's framework, primarily based on the Payment Services Regulations 2017 (PSRs) and the Electronic Money Regulations 2011 (EMRs), defines specific activities that trigger regulation.
Regulated payment services include:
- Enabling cash to be placed on or withdrawn from a payment account.
- Executing payment transactions, including direct debits, card payments, and credit transfers.
- Issuing payment instruments or acquiring payment transactions.
- Money remittance.
- Payment Initiation Services (PIS), which instruct a payment from an account held elsewhere.
- Account Information Services (AIS), which provide a consolidated view of one or more payment accounts.
Payment Institution vs. Electronic Money Institution
A key distinction is whether your firm will issue e-money.
- A Payment Institution (PI) is authorised to provide one or more of the specified payment services listed in the PSRs.
- An Electronic Money Institution (EMI) can issue e-money in addition to providing a range of permitted payment services.
If your business model involves customers holding a stored value balance in a digital wallet or on a prepaid card that they can use to make payments to third parties, you are likely issuing e-money and will need to explore the EMI route. This is different from simply processing payments where funds pass through without being held as a redeemable balance for the customer.
Who Regulates Payment Services in the UK?
For the vast majority of non-bank PSPs, the Financial Conduct Authority (FCA) is the responsible regulator. The FCA's role is to authorise and supervise payment institutions and e-money institutions, focusing on their conduct, consumer protection, operational resilience, and compliance with rules like AML and safeguarding.
The Prudential Regulation Authority (PRA) has a different remit. It is responsible for the prudential supervision of banks, building societies, and major investment firms.
A typical non-bank PI or EMI applicant will deal exclusively with the FCA. A firm would generally only fall under the PRA's scope if it were part of a wider PRA-regulated group or if it sought to become a bank itself.
UK Payment Institution, EMI, and Small-Institution Routes
The UK offers several routes to authorisation or registration, each with different requirements, limitations, and strategic trade-offs.
| Route | Key Features & Limits | Best For... |
|---|---|---|
| Authorised Payment Institution (API) | Full permission for all payment services. Requires initial capital and has no transaction limits. | Established providers, firms planning significant growth, or those offering services like payment initiation. |
| Small Payment Institution (SPI) | A registration route for firms with average monthly payment transactions not exceeding €3 million. | Startups and smaller businesses, such as a niche money remittance service. Cannot provide AIS or PIS. |
| Authorised Electronic Money Institution (EMI) | Full permission to issue e-money and provide payment services. Requires higher initial capital. | Wallet providers, prepaid card issuers, and firms where creating a redeemable stored value is core to the business. |
| Small Electronic Money Institution (SEMI) | A registration route for firms where the projected average outstanding e-money does not exceed €5 million. | Smaller-scale e-money issuers. Cannot provide AIS or PIS, but must still safeguard customer funds. |
| Registered Account Information Service Provider (RAISP) | A registration-only route for firms that only provide Account Information Services (AIS). | Open Banking platforms focused solely on data aggregation. |
Choosing a "small" institution route is a deliberate trade-off: lower entry barriers in exchange for tighter ceilings on scale and scope.
- Lower capital and lighter registration steps at the outset
- Hard caps on monthly payment volume (SPI) or outstanding e-money (SEMI), plus no AIS or PIS
- Growth past those limits means a fresh application for full API or EMI authorisation—a more intensive process
Route choice also depends on where you plan to operate. Post-Brexit, UK authorisations are not passports for the European Economic Area (EEA). Cross-border activity means meeting local rules in both the UK and each destination country.
UK Payment Service Provider Licence Requirements
A credible FCA application is a complete document package that shows your firm is organised and able to meet UK regulatory standards.
Corporate and UK Establishment
The applicant must be a UK-registered legal entity. For an Authorised Payment Institution, the FCA expects the firm’s head office and registered office to be in the UK, with key management functions also located in the UK. You must provide full details of the company’s controllers and any qualifying holdings.
Business Plan and Financial Forecasts
Your business plan must include:
- A detailed programme of operations describing the exact payment services you will offer
- A clear business model covering target markets, customer acquisition, and revenue streams
- Diagrams showing the flow of funds for each service
- Financial forecasts for at least three years, with projected transaction volumes and a credible path to profitability
Governance and Personnel
You must show the firm will be run by competent, trustworthy people. That means:
- Fit and proper assessments for all directors and anyone managing the payment services business (honesty, integrity, and competence)
- A clear organisational chart with roles, responsibilities, and reporting lines
- Named owners for compliance, risk management, and anti-money laundering
Safeguarding Customer Funds
If you hold customer funds, safeguarding is mandatory. It protects client money if your firm becomes insolvent. Your plan must cover:
- The method: segregation in a separate client account at a credit institution, or an insurance policy/comparable guarantee
- Reconciliation procedures, daily or intra-day as needed
- How funds would be returned to customers if the business fails
Financial Resources and Capital
You must prove the business is adequately capitalised. This is separate from your operating budget and the money used for safeguarding.
- Initial capital: APIs and EMIs must hold minimum capital before authorisation. This varies by service but is typically €125,000 for most APIs and €350,000 for Authorised EMIs.
- Ongoing capital (own funds): After authorisation, you must keep holding capital at the level set by the FCA’s prescribed methods.
Compliance and Operational Framework
Your application needs policies and procedures that show you can operate safely and in compliance. Cover at least:
- Anti-Money Laundering (AML) and Counter-Terrorist Financing (CTF)
- Know Your Customer (KYC) and customer due diligence
- Transaction monitoring and sanctions screening
- Data security and fraud prevention
- Business continuity and disaster recovery
- Complaints handling and incident reporting
How to Apply for a UK PSP Authorisation—and What Does it Cost?
The application process is a multi-stage project that requires careful planning and preparation. Rushing an incomplete submission will only lead to significant delays.
The Application Journey
- Define Your Activities: Precisely map your proposed services to the legal definitions in the PSRs and EMRs.
- Choose Your Route: Select the correct legal entity and permission route (such as SPI, API, or EMI).
- Conduct a Gap Analysis: Assess your existing business against the FCA’s requirements to identify gaps in your governance, systems, and controls.
- Prepare Documentation: Draft all necessary policies, procedures, financial forecasts, and business plans. This is the most time-consuming phase.
- Submit the Application: Complete and submit all forms and supporting documents through the FCA’s online systems.
- Respond to Questions: The FCA will almost certainly have questions. Responding promptly and thoroughly is crucial to keeping the process moving.
- Complete Pre-Launch Conditions: Address any final requirements before you can begin operating.
Understanding the Costs
The total cost of becoming an authorised PSP extends far beyond the application fee. You need to budget for several distinct categories:
- FCA application fee: non-refundable on submission — £5,640 for a full Authorised PI or EMI; £1,130 for an SPI or RAISP
- Regulatory capital: ring-fenced initial capital of €125,000 for most APIs, or €350,000 for EMIs
- Professional advice: legal and compliance consultants to prepare the application to FCA standards
- Operational setup: technology, cybersecurity, safeguarding bank accounts, staffing, and insurance
- Ongoing compliance: audits, regulatory reporting, and maintaining your compliance function
Specialist UK regulatory advice remains essential for the FCA application itself. VJM Global can support the preparatory stages—accounting, tax, and cross-border business planning—so your financial projections and business plan are complete enough to underpin a strong submission.
Application Timelines
The regulations set a statutory deadline of three months for the FCA to determine a complete application. However, if the application is deemed incomplete, this can extend to 12 months.
That statutory window is not the full project timeline. FCA data shows the journey from initial submission to a final decision is often much longer. For payment and e-money authorisations in Q4 2025/26, the median determination time was 236 days from the date of receipt, according to FCA operating service metrics. A high-quality, complete, and well-evidenced application is the fastest route to a decision.
Ongoing Compliance After Authorisation
FCA authorisation brings continuous supervision and ongoing obligations. Approval is only the point at which those duties begin.
Reporting and Monitoring
Firms must continuously monitor and report on their activities. This includes:
- Ongoing capital adequacy calculations
- Regular safeguarding reconciliations and, for many firms, a monthly safeguarding return
- Annual and ad-hoc regulatory returns on fraud statistics and operational risk
- An independent annual audit of safeguarding arrangements (unless exempt)
Operational Duties
Your compliance framework has to operate day to day, not sit as a static policy pack. Core operational duties include:
- KYC refreshes and ongoing customer due diligence
- Sanctions screening and transaction monitoring for suspicious activity
- Fraud controls proportionate to your products and channels
- Complaint handling procedures
- Prompt reporting of major operational or security incidents to the FCA
Managing Material Changes
You cannot make significant changes to your business without informing the regulator. Under the PSRs and EMRs, you must notify the FCA of any material changes to your services, ownership, key personnel, or safeguarding arrangements. Failure to do so is a breach of the regulations.
The cases of Fast Remit Ltd and RVB Currency UK Ltd—both cancelled in part for failing to notify the FCA of changes—show how seriously the regulator treats these duties.
Maintaining a compliance calendar, producing regular management information, and conducting internal reviews are essential disciplines for demonstrating that you continue to meet the conditions of your authorisation.
Frequently Asked Questions
How much does it cost to get an EMI licence in the UK?
The FCA application fee for an Authorised EMI is currently £5,640. You also need at least €350,000 in initial capital, plus further spend on legal advice, compliance systems, staffing, and safeguarding arrangements.
What's the difference between the PRA and the FCA for payment service providers in the UK?
The FCA is the primary regulator for most non-bank payment and e-money institutions, overseeing their authorisation and conduct. The PRA is responsible for the prudential supervision of systemic firms like banks and insurers, a separate regulatory remit.
What is a payment service provider (PSP) licence in the UK and who needs one?
"PSP licence" is a commercial term for a UK authorisation or registration. You will likely need one from the FCA if your business executes payments, provides money remittance, acquires transactions, offers open banking services (AIS/PIS), or issues electronic money to UK customers.
