Running a payment business in the UK puts a firm inside one of Europe’s most closely watched regulatory systems. Money transfer operators, currency exchange shops, and cheque cashing services all sit somewhere within it, and working out exactly where a business fits is the first real step. Those rules decide which regulator keeps an eye on the firm, how much capital has to be held, and how the application process plays out. Get this wrong, and launch plans can slip by months, or the business ends up trading without the permission it needs.
How the Regulatory Categories Fit Together
The UK payments sector is not governed by a single rulebook. Different types of firms sit under different regimes, and the permissions, capital thresholds, and supervisory arrangements vary accordingly. So, a Money Service Business License is one route into the market, and the category a firm chooses shapes almost everything that follows. Finally, there is a difference between Money Service Businesses (MSBs), Authorised Payment Institutions (APIs), Small Electronic Payment Institutions (SPIs), Electronic Money Institutions (EMIs) and Small Electronic Money Institutions (small EMIs) as providers of money transfer. Each of these labels describes a distinct regulatory status rather than a marketing term.
Money Service Businesses are the most traditional category. They register with HM Revenue and Customs under the Money Laundering Regulations rather than being authorised by the Financial Conduct Authority, which makes the process lighter but also narrower in scope. An MSB can carry out currency exchange, money remittance, and cheque cashing, but the moment money transmission is offered as a payment service, the firm must also register with the FCA under the Payment Services Regulations. The HMRC register and the FCA register must tell the same story, and a mismatch between the two tends to attract supervisory attention.
Who Needs to Register and With Whom
The question of which regulator a payment operator must approach depends on the services provided and the firm’s existing regulatory status.
- Businesses conducting money transmission as their core activity and not authorised by the FCA must register with HMRC as an MSB and separately register or become authorised by the FCA under the Payment Services Regulations.
- Firms already authorised by the FCA under the Financial Services and Markets Act 2000 that provide currency exchange, money transmission, or cheque cashing are supervised by the FCA for anti-money laundering purposes and do not register with HMRC.
- Money transmitters operating as Small Payment Institutions or Authorised Payment Institutions are supervised by HMRC under the Money Laundering Regulations but registered with the FCA to provide payment services under the Payment Services Regulations.
This dual-registration structure means that payment operators often deal with two regulators at the same time. HMRC focuses on anti-money laundering and counter-terrorist financing compliance, while the FCA oversees conduct, prudential standards, and payment services permissions. The two registers are cross-checked, and HMRC may challenge businesses whose registration details do not match the FCA’s records.
The Fit and Proper Test for Responsible Persons
A critical part of the registration process is the fit and proper test applied to the individuals who control or manage the business. HMRC must refuse registration if it is not satisfied that the applicant, its officers, managers, beneficial owners, and any agents used by the business are fit and proper persons.
The assessment covers:
- Criminal convictions for offences listed in Schedule 3 of the Money Laundering Regulations, which automatically disqualify a person from being considered fit and proper.
- Honesty, integrity, and competence of directors, beneficial owners, and the nominated officer responsible for anti-money laundering compliance.
- Financial soundness, including the individual’s tax affairs and any history of insolvency or failure to comply with regulatory obligations.
For money service businesses, the fit and proper test extends to agents used by the business. Any officer, manager, or beneficial owner of an agent must also pass the assessment. This reflects the reality that agents often handle customer transactions directly and therefore pose equivalent money laundering risks to the principal business. Changes to responsible persons or agents must be reported to HMRC within 30 days, and registration can be suspended or cancelled if a person ceases to be fit and proper.
Anti-Money Laundering Framework Requirements
Registering with HMRC or the FCA is far more than a box-ticking exercise. Applicants have to show they already have a working anti-money laundering, counter-terrorist financing, and counter-proliferation financing framework in place before registration is granted. The FCA wants to see documented policies and procedures that line up with the Money Laundering Regulations.
That framework needs to include a business-wide risk assessment setting out the money laundering, terrorist financing, and proliferation financing risks built into the business model. Customer types, products and services, geographic exposure, transaction methods, and delivery channels all have to be covered. The assessment should also spell out the controls managing those risks and how effective they are.
Customer risk assessments have to match the business-wide picture. Each customer’s risk profile decides how much due diligence gets applied, and the thinking behind those assessments should be documented and repeatable. Operational procedures need to cover customer due diligence, enhanced due diligence for higher-risk situations, politically exposed persons and sanctions screening, transaction monitoring, suspicious activity reporting, and staff training.
Training is not something done once and forgotten. Staff need regular sessions shaped around the business model and the specific money laundering and terrorist financing risks the firm faces. Written records of that training have to be kept. The FCA has pointed out that thin or generic anti-money laundering frameworks are a common reason applications stall.
Payment Services Authorisation
For payment operators whose activities come under the Payment Services Regulations 2017, the FCA lays out several authorisation and registration routes, each with its own thresholds and requirements.
Authorised Payment Institutions can offer the full range of payment services, covering money remittance, payment execution, and account information services. There are no transaction volume limits, but capital requirements run from £20,000 to £125,000 depending on what is provided. The application process usually takes six to twelve months.
Small Payment Institutions are limited to payment execution and money remittance, with a monthly average transaction volume cap of €3 million. Minimum capital sits at £20,000, and the timeline is shorter, generally three to six months. What they cannot do is offer payment initiation or account information services.
Electronic Money Institutions issue electronic money and provide payment services. Authorised EMIs have unlimited transaction volumes and must hold a minimum capital of €350,000 or 2% of outstanding e-money balances, whichever is higher. Small EMIs work under a €3 million monthly transaction limit and a €5 million outstanding balance cap, with a £20,000 capital requirement.
Safeguarding rules have tightened up. From May 2026, payment institutions have to hold customer funds in trust accounts or cover them with insurance, and that money cannot be used for the firm’s own purposes. Electronic money balances must be completely ring-fenced from the firm’s capital.
Ongoing Compliance and Reporting Obligations
Registration or authorisation marks the beginning of an ongoing relationship with the regulator, not the end of the compliance journey. Registered money service businesses and authorised payment institutions must notify the relevant authority of material changes to the information provided during the application process within 30 days. This includes changes to directors, beneficial owners, addresses, and the nature of the business activities.
HMRC and the FCA share information and check for discrepancies between their registers. A business whose HMRC registration describes activities that do not align with its FCA permissions may face challenges or sanctions. Principal businesses remain responsible for the anti-money laundering compliance of their agents, including training and the application of policies and procedures.
The FCA has signalled increased scrutiny of certain sectors, including Annex 1 financial institutions, with applications expected to take longer as the regulator assesses financial crime risks more closely. For payment operators, maintaining accurate registration details, keeping anti-money laundering frameworks up to date, and responding promptly to regulatory requests are essential to avoiding suspension or cancellation of registration.
Practical Takeaways for Payment Operators
The UK regulatory system rewards preparation. Businesses that map their activities against the relevant regulations before applying tend to move through the process more smoothly than those that treat registration as a formality. Several themes run through the requirements.
- Identify the correct regulator and route early. The choice between HMRC registration, FCA authorisation, and the various payment institution categories shapes everything that follows, from capital planning to timelines.
- Build the compliance framework before applying. Risk assessments, policies, training records, and customer due diligence procedures need to exist in documented form, not as intentions.
- Keep registration details current. Changes to ownership, management, addresses, or activities must be reported within set deadlines, and mismatches between registers attract attention.
- Treat agents as part of the compliance perimeter. Principal businesses carry responsibility for the anti-money laundering performance of their agents, including training and oversight.
For anyone planning to enter the UK payments market, the framework is demanding but navigable. Clear understanding of the categories, realistic timelines, and a genuine commitment to compliance make the difference between a straightforward registration and a prolonged struggle with regulators.
