Why Fintechs Stall at FCA Authorisation: It’s the People, Not the Product

A fintech can have an impressive product, experienced developers, strong funding and a convincing commercial plan, yet still run into difficulties during FCA authorisation. The problem is often not the technology.

For firms entering regulated financial services in the UK, the Financial Conduct Authority is interested in more than what the product does. It also needs to understand who is running the business, who is responsible for regulated activities and whether those individuals have the competence, capacity and authority to perform their roles.

That creates a challenge for technology-led businesses. Founders naturally spend considerable time proving the product. Regulatory readiness requires them to prove the organisation behind it as well.

FCA Authorisation Is About the Firm, Not Just the Fintech Product

A fintech seeking authorisation may understandably focus on its platform, security, customer journey and commercial model. Those areas matter, but authorisation also involves demonstrating that appropriate governance and controls exist around the business.

The FCA’s Senior Managers Regime illustrates why people are central to this process. Senior Management Functions are held by individuals with key responsibilities, and people performing an SMF generally need regulatory approval before starting that role. Each SMF holder must also have a Statement of Responsibilities explaining what they are accountable for.

This means a promising product cannot compensate for unclear accountability.

If a firm cannot demonstrate who owns compliance, how senior management understands regulatory risk or whether key individuals are suitable for their responsibilities, the authorisation process can expose those weaknesses quickly.

For founders, this requires a shift in perspective. Regulatory structure should develop alongside the product rather than being added immediately before an application is submitted.

The Compliance Function Cannot Be a Name on an Organisation Chart

One mistake growing fintechs can make is treating compliance as an administrative position that simply needs to be filled.

For firms where the relevant rules require it, SMF16 is the Compliance Oversight function. The FCA describes heads of compliance as important roles and expects applicants to have skills and knowledge appropriate to the firm’s size and potential risk of harm. It considers factors including training and experience when assessing capability.

That distinction matters.

A candidate may understand financial services generally but still lack sufficient knowledge for the specific business model. Someone else may have strong technical compliance knowledge but lack the capacity to challenge senior management effectively.

A fintech therefore needs to think beyond the candidate’s job title.

The person responsible for compliance should understand the firm’s activities, its regulatory obligations and the risks created by the way it operates. They also need enough authority and access to senior management to perform meaningful oversight.

For businesses that do not already have suitable expertise internally, specialist compliance officer recruitment for FCA-regulated firms can help identify candidates whose experience is aligned with the regulatory responsibilities of the position.

Experience Needs to Match the Actual Business Model

Not every fintech presents the same regulatory challenges.

A payments company, investment platform and consumer-credit business may all use sophisticated technology, but their products, customers and regulatory risks can differ substantially.

This is why simply hiring someone who has “worked in compliance” may not be enough.

The FCA’s guidance for some authorisation applications makes clear that previous industry experience alone may not establish competence for Head of Compliance or MLRO responsibilities. It may consider training, experience, capacity and third-party support in relation to the firm’s risks and controls.

A useful recruitment process should therefore examine questions such as:

• Has the candidate worked with a comparable regulatory framework?
• Do they understand the firm’s products and customer risks?
• Can they explain how controls should operate in practice?
• Do they have enough time and resources to fulfil the role?
• Can they challenge founders or executives when necessary?

The strongest candidate is not automatically the person with the longest CV. Relevant experience and the ability to apply it to the particular firm matter more.

Governance Weaknesses Often Become Visible During Authorisation

Early-stage companies tend to operate differently from established financial institutions.

A founder may make product, commercial and operational decisions personally. Teams may communicate informally. Responsibilities can overlap because everyone is focused on getting the business running.

That flexibility can help a start-up move quickly, but it can create problems when regulated responsibilities are unclear.

During authorisation, questions around governance can reveal whether a company has matured beyond its start-up habits.

Who is responsible for compliance?

Who monitors customer outcomes?

Who can challenge commercial decisions?

How are regulatory issues escalated?

What happens when the compliance function disagrees with the founders?

These are organisational questions rather than technology questions.

The FCA’s approach to Senior Management Functions reinforces the need for clear accountability. Senior managers have defined responsibilities and are subject to fitness and propriety requirements covering areas including honesty, integrity and reputation, competence and capability, and financial soundness.

Hiring the Right Person Is Only Part of the Answer

Finding a qualified compliance professional does not automatically make a fintech ready for authorisation.

The role needs to function properly after the appointment.

A compliance officer who receives little information, lacks adequate resources or is excluded from major decisions cannot provide effective oversight simply because their name appears in regulatory documents.

Senior leadership therefore needs to create the conditions in which compliance can operate.

That means involving the function early enough in decisions about new products, customer communications, operational changes and other matters with regulatory implications. It also means having clear reporting arrangements and escalation routes.

This can sometimes create tension in founder-led businesses. Commercial teams are rewarded for growth and speed, while compliance professionals may identify reasons to slow a decision down.

Healthy governance does not eliminate that tension. It creates a process for dealing with it.

Leaving Key Recruitment Too Late Creates Avoidable Pressure

Recruiting senior compliance professionals shortly before an authorisation application can create unnecessary difficulties.

The firm may discover that its preferred candidate lacks relevant experience or that responsibilities have not been properly allocated. The new hire may then need to understand the business, review policies and identify weaknesses while the founders are trying to progress the application.

Starting earlier provides more time to test whether the individual and the organisation fit together.

It also gives the compliance professional an opportunity to influence the firm’s controls before they become difficult to change.

This is particularly relevant because applications for senior management functions can receive additional regulatory scrutiny depending on the circumstances. The FCA may seek further information, and its published guidance notes that higher levels of scrutiny can apply where concerns exist around a candidate or firm.

Recruitment should therefore be considered part of regulatory preparation rather than an administrative task at the end of it.

Policies Need People Who Can Actually Apply Them

Another common weakness is confusing documentation with operational readiness.

A fintech may have detailed compliance manuals, risk assessments and procedures. Those documents matter, but policies are useful only when people understand who is responsible for applying them.

Consider a customer complaint. A written procedure may explain how complaints should be recorded and handled. Operational readiness requires staff to recognise a complaint, know where it goes, understand who reviews it and know when an issue should be escalated.

The same principle applies to financial promotions, conflicts, customer vulnerability, anti-money-laundering controls and other regulated processes where relevant to the firm’s activities.

A regulator is interested in how the business operates, not merely whether a document exists.

Fintech Founders Should Build the Regulatory Team Alongside the Product

There is a practical lesson for founders preparing for FCA authorisation: product development and regulatory development should not happen on separate timelines.

As the product becomes more sophisticated, the governance around it should mature too.

Founders can start by mapping the regulated activities involved in the business model and identifying which responsibilities require clear ownership. From there, they can assess whether the existing management team genuinely has the necessary competence and capacity.

Where gaps exist, recruitment can begin before those gaps become obstacles.

The objective is not to make a young fintech operate like a decades-old financial institution. It is to build governance appropriate to the firm’s activities, scale and risks.

The Product Opens the Door, but People Build Regulatory Confidence

A compelling fintech product explains why a business might succeed commercially. It does not, by itself, demonstrate that the company is ready to operate within a regulated market.

FCA authorisation places real weight on governance, accountability and the suitability of people performing key roles. The regulator’s published expectations around Senior Management Functions and compliance oversight make that clear.

Fintech founders should therefore ask a different question before focusing on another product feature: if the regulator examined the people behind the platform, would responsibilities, competence and decision-making be equally convincing?

Addressing that question early can reveal gaps that another product update never will.