UK Small Payment Institution: FCA Registration, Requirements and Application Process

A founder planning a UK remittance, payment-processing or merchant-settlement business often searches for an "SPI licence" as the simpler route. First: SPI means Small Payment Institution, and the FCA registers an SPI rather than authorising it — "SPI licence" is the common search phrase, not the legal status. The route carries a €3 million monthly-average payment-transaction limit, excludes payment initiation and account information services, requires a UK head office, registered office or place of residence (as the case may be), and is not an e-money licence: it confers no right to issue e-money.

The real question is rarely whether the SPI route is easier, but whether the proposed services, volumes, management and UK operations satisfy the conditions at all. This guide covers who qualifies, the €3 million test, permitted services, the documents and Connect process, fees and costs, voluntary safeguarding, and whether to apply from scratch or acquire an existing SPI company.

Quick Answer: What Is an SPI Licence in the UK?

"SPI licence" is the search term; the formal status is FCA registration as a Small Payment Institution under the Payment Services Regulations 2017, intended for smaller UK payment businesses whose average monthly payment transactions do not exceed €3 million. It is not a banking licence, does not permit e-money issuance, and cannot cover payment initiation services (PIS) or account information services (AIS). It carries no passporting rights — an SPI is UK-only. A business expecting to exceed the limit, or needing PIS, AIS or e-money, should assess API or AEMI authorisation.

SPI vs API vs SEMI vs AEMI vs RAISP

Five statuses are regularly confused; the table summarises the differences.

An API is not automatically permitted to issue e-money — that needs the Electronic Money Regulations 2011 — and a SEMI is an e-money registration, not an SPI variant.

Who Can Register as a Small Payment Institution?

The conditions sit in Regulation 14 of the Payment Services Regulations 2017 and in the FCA's guidance for payment institution applicants. The application must satisfy the applicable requirements, and:

• Average monthly payment transactions must not exceed €3 million, including UK agents' transactions; a business trading under 12 months may use projections.
• The business must not provide account information or payment initiation services.
• Relevant managers must be of good repute, appropriately knowledgeable and experienced, and without money-laundering, terrorist-financing or other financial-crime convictions.
• Anyone with a qualifying holding must be fit and proper.
• Close links must not prevent effective FCA supervision.
• The head office, registered office or place of residence (as applicable) must be in the UK.
• Requirements of the Money Laundering Regulations 2017 must be met.

Note what the legislation does not say: no fixed number of UK employees, no minimum directors, no mandatory full-time CEO, no set years of experience, no rule that shareholders must be UK-resident. Substance is assessed against the actual business.

The €3 Million Monthly-Average Payment Limit

The test is the monthly average of relevant payment transactions over the preceding 12 months, including UK-agent activity; a new applicant may use projections. The measure is payment transactions — not revenue, profit, balances or funds held.

Example: a business projects £27 million equivalent in relevant payment transactions over its first year — a monthly average of £2.25 million. The threshold is statutory and in euros, so the applicant must satisfy itself that the average stays below €3 million at applicable rates, keeping evidence. If growth would push it over within the forecast period, assess the API route from the outset.

Staying below €3 million is a central condition, and monitoring continues after registration: under Regulation 16, an SPI that no longer meets one of the registration conditions or intends to provide services outside its permitted scope must, within 30 days of becoming aware of the change, apply for payment institution authorisation or, where account information is the only service, registration as an account information service provider (RAISP), if it intends to continue providing UK payment services. A firm not continuing those services should take advice and plan lawful cessation.

Which Payment Services Can an SPI Provide?

Payment-service categories sit in Schedule 1 to the Payment Services Regulations 2017. Depending on the registration granted, an SPI may provide money remittance, execution of payment transactions, cash placement or withdrawal on a payment account, and card or instrument execution. Acquiring or processing models can qualify within a permitted category — not every gateway does.

A commercial label — "gateway", "wallet", "processor" — does not determine the category; the permission depends on what the FCA registers. PIS and AIS are excluded, e-money needs separate analysis, credit activity may trigger separate requirements, and crypto or stablecoin activity needs its own perimeter assessment.

Remittance example: a company collecting funds from UK senders and paying recipients abroad provides money remittance — a classic SPI activity while volumes remain within the limit.

Payment-platform example: a platform receiving merchant settlement funds and executing pay-outs is likely executing payment transactions and needs registration; a purely technical gateway routing authorisation messages without touching funds may fall outside the perimeter. The distinction is the flow of funds.

When Is an API the Better Route?

API authorisation is usually better where volumes exceed — or will soon exceed — the €3 million average; where PIS or AIS are part of the product; where a larger agent network or complex account operations are planned; where banking partners require an authorised firm; or where the model would outgrow the SPI route within a year or two.

An API is not automatically superior: it carries initial capital, heavier governance and mandatory safeguarding. The right route follows from actual services and realistic scale, not prestige.

UK Office, Management and Operational Substance

Regulation 14 requires the head office, registered office or place of residence, as the case may be, to be in the UK — a company's head office and any registered office; a sole trader's place of residence. The FCA looks behind the address to where decisions are made. The application should show who runs payment services; managers need relevant knowledge and experience; governance should fit the model.

Outsourcing does not remove management responsibility, and an address alone does not demonstrate substance: virtual-address-only structures, nominee managers, directors who cannot explain the model, or fully outsourced operations attract questions.

Qualifying Holders and Ownership

A qualifying holding generally means 10% or more of the capital or voting rights, or below 10% with significant influence. The assessment covers direct and indirect ownership, beneficial ownership, group structure, source of funds, soundness, reputation and close links; each holder is notified through the relevant Connect form.

A simple ownership chart resolves most questions early. Changes in qualifying holdings after registration are themselves notifiable — which matters for acquisitions, below.

FCA SPI Application Documents

The FCA lists supporting material for SPI applicants; the final set depends on the services and model — not every item is required in every case. A practical file has four groups:

Corporate and ownership documents

• Certificate of incorporation and constitutional documents
• Registered and head-office details, group structure, ownership chart
• Shareholder, qualifying-holder and beneficial-ownership details

Management and governance documents

• Organisation chart with roles and responsibilities
• Directors' and managers' CVs and experience evidence
• Governance, conflicts-of-interest and outsourcing-oversight arrangements

Business and financial documents

• Programme of operations, business plan, services description
• Customer profile, payment-flow diagrams, volume projections
• Financial forecasts, revenue model, banking and settlement arrangements, agent strategy

Compliance and operational documents

• AML/CTF framework, due diligence, sanctions screening, transaction monitoring
• Fraud controls, complaints, recordkeeping, security controls
• Incident management, business continuity, wind-down planning, safeguarding framework where adopted

The FCA expects policies tailored to the business, not templates; many firms have the AML set reviewed pre-filing — AML and financial crime advisory services exist to pressure-test that part of the pack before a case officer does.

FCA Connect Application Process

The application is submitted through the FCA's Connect system. In practice, a well-run project moves through these stages:

• Regulatory-perimeter analysis — is this a payment service at all?
• SPI versus API assessment against volumes and services
• UK entity and governance preparation
• Payment-service and flow mapping
• Supporting-document preparation
• Connect submission and fee payment
• Completeness assessment; case-officer allocation
• FCA information requests
• Applicant responses and clarifications
• Registration decision
• Register entry
• Post-registration implementation
• Agent registration where applicable

Incomplete or inconsistent applications may be delayed or rejected — the FCA will reject a submission without assessing it if minimum information is missing. It does not pre-approve drafts; no adviser can guarantee approval.

How Long Does FCA SPI Registration Take?

Separate the project timeline from the statutory window: preparation commonly takes longer than the FCA review. Regulation 15 applies the determination framework: a complete application is generally determined within three months, an incomplete one within 12 months of receipt. The FCA also currently publishes a maximum service metric of 20 working days to allocate a case officer — an operational metric, not the statutory decision period or an approval guarantee; it may change, so reverify it on the live FCA page before relying on it.

Three months is the statutory window for a complete application — not a promised project timeline — and response quality sits with the applicant.

SPI Application Fee and Total Project Cost

An SPI application sits in Category 3, currently £1,130 — reverified against the authorisation and registration fees page (reflecting FEES 3 Annex 8R) in July 2026. The fee is non-refundable, paid on submission. An API application falls into Category 4 (£2,820) or Category 5 (£5,640) depending on the services.

The fee is one line in the budget. Realistic planning also covers: company setup; UK office and staffing; directors and managers; application support; the AML framework; technology; fraud and monitoring tools; security and continuity; banking and settlement; safeguarding where elected; insurance; reporting; compliance personnel; agent oversight; and legal and accounting support. These depend on the model — a "cheap SPI licence" pitch usually means most of these lines were omitted.

Does a Small Payment Institution Need Initial Capital?

The direct answer: the SPI route carries no API-style statutory initial-capital requirement. That is not the same as operating without resources: forecasts must be credible, the applicant needs funding for operations, staff, systems, compliance and liabilities, and the FCA reviews financial information. Banking partners apply their own, often stricter, expectations. "No capital required" is marketing, not how registration or banking works.

Safeguarding Rules for Small Payment Institutions

Safeguarding changed on 7 May 2026 under PS25/12. It is not automatically mandatory for an SPI, which may elect voluntary safeguarding under Regulation 23. Where an SPI makes that election, CASS 15 applies as though it were an API, subject to its applicable provisions: depending on the method chosen, segregation or qualifying insurance or guarantees, daily safeguarding calculations, the reconciliations applicable to that arrangement, acknowledgement letters, records and governance controls.

The election is operational, not just opening a separate bank account. Safeguarded funds must not be called deposits unless they genuinely are, and FSCS protection should not be assumed. The often-blurred distinction between safeguarding reviews and AML audits is examined in our guide to the EMI safeguarding audit versus the AML audit.

SPI AML and Financial-Crime Requirements

Payment-services registration and AML compliance are separate; where the business falls within scope of the Money Laundering Regulations 2017, it must maintain the applicable AML and counter-terrorist-financing controls, with FCA supervision where the FCA is the relevant supervisory authority, alongside proportionate sanctions, fraud and monitoring controls. Build the framework from the firm's own risk assessment, not a template.

A proportionate framework covers: a business-wide risk assessment; customer due diligence and beneficial ownership; enhanced due diligence; sanctions screening; transaction monitoring; escalation; recordkeeping; training; and governance.

Agents and Outsourcing

Agents providing payment services for an SPI generally need registration, and the principal remains responsible for oversight — an agent does not independently hold the registration. Outsourcing transfers work, not accountability. Applications should describe processors, banks, technology and compliance providers, with documented agreements and oversight consistent with the business plan.

Can You Buy a Ready-Made SPI Licence in the UK?

The direct answer: a buyer does not normally acquire a standalone, transferable SPI licence. The registration belongs to the legal entity, so the transaction usually means purchasing shares in the company holding it — with everything else it carries.

Due diligence is the heart of the deal: review the Financial Services Register status and payment services covered; restrictions; directors; qualifying holders; regulatory correspondence; complaints; the AML framework, AML investigations, escalation governance and material control deficiencies, subject to applicable confidentiality and legal restrictions; banking and safeguarding arrangements; agents; historic volumes against the €3 million limit; outsourcing; customer liabilities; financials; tax; and the buyer's planned model changes.

Changes in qualifying holdings, management, control and model may require FCA notifications or further action — a share acquisition relocates FCA scrutiny rather than avoiding it. Be sceptical of listings advertising instant registration, pre-approved companies or automatically transferring banking: banking and safeguarding providers may reassess the relationship after a change of ownership, management or model — requesting fresh due diligence, imposing conditions, restricting services or deciding not to continue.

New Application vs Buying an Existing SPI Company

Neither column wins by default: a new application suits a defined model; an acquisition suits a buyer valuing the entity commercially and pricing diligence honestly.

Why SPI Applications Are Delayed or Weakened

Issues that may delay or weaken an application — not all are formal refusal grounds:

• Wrong SPI-versus-API classification; PIS or AIS proposed under the SPI route
• Unrealistic transaction projections or unsupported forecasts
• Weak UK substance; directors unable to explain the business model
• Unclear ownership or qualifying holders
• Generic AML policies not tailored to the payment flows
• Payment flows conflicting with the programme of operations
• Incomplete outsourcing arrangements; unclear agent oversight
• Missing fraud controls; unexplained banking and settlement arrangements
• Safeguarding wording inconsistent with the model
• Website claims contradicting the application; attempted e-money issuance via SPI registration

The common thread is consistency: the programme of operations, flow diagrams, forecasts, policies and website should describe one business.

Ongoing Obligations After SPI Registration

Registration starts obligations, not ends them. An SPI must stay within the conditions and monitor volumes against the €3 million average; meet FCA reporting; keep firm information current; notify management and qualifying-holder changes; register and oversee agents; maintain AML and sanctions controls; handle complaints; keep records and resilience; discharge safeguarding duties where adopted; and, where a Regulation 16 trigger arises, apply for the appropriate authorisation or registration within 30 days. Firms serving cross-border users should map the applicable regulatory regimes — our payment service provider compliance page covers UK and international payment-service requirements.