How the FCA protects consumers.

A regulated firm can be ordered to refund interest, remove default markers from your credit file and pay compensation without you ever attending court. The mechanism is the FCA rulebook every authorised firm must follow. This guide explains what the regulator does, the protections that flow from its rules and how to use them when something goes wrong.

10 min read Foundational UK Specific Hub 05 · Regulation & Rights
~42,000 firms
UK financial firms regulated by the FCA. The list includes banks, lenders, brokers, insurers and investment platforms. Almost every firm a consumer would borrow from or invest with.
£124m in fines
Total fines issued by the FCA in 2024/25, with 1,456 firm authorisations cancelled and 5 individual criminal convictions. The regulator has and uses real powers.
£354.6m in redress
Voluntary redress firms agreed to pay consumers in 2024/25 under FCA pressure. The threat of regulator action drives compensation that consumers would otherwise lose.

What the FCA is

The Financial Conduct Authority is the UK's independent regulator of financial services. It is a public body, funded by the firms it regulates, with a statutory mandate established under the Financial Services and Markets Act 2000. The FCA's role is to set the standards every authorised firm must meet, supervise their conduct and take enforcement action where firms fall short.

The FCA in its current form was created on 1 April 2013, taking over from the Financial Services Authority (FSA), which was abolished following criticism of its performance during the 2008 financial crisis. From 1 April 2014, the FCA also assumed responsibility for consumer credit (loans, credit cards and short-term lending) from the Office of Fair Trading. The regulator currently oversees approximately 42,000 firms across all sectors of UK financial services.

If a firm wishes to lend, advise, broker, insure or invest in the UK, FCA authorisation is a legal requirement. No authorisation, no business.

The basic principle

Authorisation is granular. A firm may be permitted to broker loans without being permitted to lend directly. It may be permitted to give investment advice without being permitted to manage investments on a discretionary basis. The FCA Register, which lists every authorised firm and the specific activities each is permitted to carry out, is publicly searchable and is updated on average every 24 hours. Firms operating without the appropriate authorisation are committing a criminal offence under section 19 of the Financial Services and Markets Act 2000.

The three statutory objectives

Parliament gave the FCA three statutory objectives in the Financial Services and Markets Act 2000. These are the only outcomes the FCA is legally required to pursue. Every rule the FCA writes and every supervisory action it takes must be justified by reference to one or more of these objectives.

The FCA's three statutory objectives
Objective 1
Protect consumers from harm
Objective 2
Protect and enhance the integrity of the UK financial system
Objective 3
Promote effective competition in the interests of consumers

Source: Financial Services and Markets Act 2000 (as amended). Two of the three objectives are explicitly about consumer outcomes; the third concerns market stability and benefits consumers indirectly.

A secondary objective was added in 2023 requiring the FCA to facilitate the international competitiveness and growth of the UK economy in the medium to long term. Where the secondary objective conflicts with the primary objectives, the primary objectives take precedence. The first objective, consumer protection, is the most directly relevant when something goes wrong with a financial product or service. A regulator with a statutory duty to consumers is meaningfully different from one without.

The regulatory perimeter

The regulatory perimeter is the FCA's term for the boundary between activities it regulates and those it does not. Most things commonly recognised as financial products fall inside the perimeter. Some notable exceptions remain. Where a problem involves an activity outside the perimeter, the FCA cannot intervene and a different complaint route applies.

FCA regulatory perimeter
What is regulated and what is not
Activity Within the perimeter What this means in practice
Personal loans and credit cardsYesFull FCA conduct rules apply, with FOS escalation available
Mortgages and remortgagingYesFCA rules apply under a separate regime from consumer credit
Insurance (most types)YesConduct rules apply, FOS available for disputes
Investment advice and platformsYesSuitability and conduct rules apply
Pensions (most types)YesFCA rules apply
Buy-now-pay-later (currently)Mostly noComing inside the perimeter from mid-2026
Premium Bonds (NS&I)NoGovernment-backed, with a separate complaints procedure
Cryptocurrency (most uses)Mostly noLimited FCA oversight, with high consumer risk
Most B2B financial servicesOften noDifferent rules apply to non-consumer transactions

Why is buy-now-pay-later not yet regulated?

A historical exemption in the rules excluded interest-free credit repayable in 12 months or fewer. Buy-now-pay-later (BNPL) products fitted that exemption almost perfectly when they grew rapidly from 2018 onwards. Providers such as Klarna and Clearpay therefore developed outside FCA oversight. The government has since legislated to bring BNPL inside the perimeter, with rules taking effect from mid-2026. Until that point, BNPL agreements do not carry the same protections as a credit card and do not trigger Section 75 chargeback rights under the Consumer Credit Act 1974.

The Consumer Duty: the headline protection since 2023

The Consumer Duty is the most significant change to UK financial regulation in a decade. It applies to every authorised firm and sets a higher standard of consumer protection than any previous regime. The Duty came into force on 31 July 2023 for products and services available to buy or renew. It applied to closed and legacy products from 31 July 2024.

The Duty sits at Principle 12 of the FCA's Principles for Businesses. The wording is short:

A firm must act to deliver good outcomes for retail customers.

FCA Principle 12 · In force 31 July 2023

Underneath the headline principle sit three "cross-cutting rules" requiring firms to act in good faith, avoid foreseeable harm and enable customers to pursue their financial objectives. Below those sit four "outcome rules" covering products and services, price and value, consumer understanding and consumer support. The combined effect raises the legal bar significantly. Complaints brought to the Financial Ombudsman Service or to the courts can now succeed on the basis of poor outcomes alone, even where no specific FCA rule was technically breached. The Consumer Duty is covered in detail in our guide on the Consumer Duty.

Before the Duty, firms had to treat customers fairly. Under the Duty, firms must actively deliver good outcomes. The legal standard moved up.

What changed in July 2023

The FCA Register: the two-minute check

Every authorised firm in the UK is listed on the FCA's public Register. The Register is free to search, takes around two minutes to use and provides definitive confirmation of a firm's status. It is the single most important consumer-protection tool the FCA provides. It is also the foundation of almost every other protection in this guide.

  • Whether the firm is currently authorised

    "Authorised" status indicates a current licence to trade. "Revoked" or "Cancelled" status indicates the licence has been withdrawn. A firm not appearing on the Register at all is unauthorised. Trading without authorisation is a criminal offence.

  • The specific activities the firm is permitted to carry out

    Authorisation is granular. A firm authorised to broker loans is not necessarily authorised to lend. The reverse is also true. The Register details exactly which activities each firm is permitted to undertake.

  • The firm's verified contact details

    Where a firm contacts a consumer using details that do not match the Register, the consumer may be dealing with a "clone firm" (a fraudster impersonating an authorised firm). Cross-checking using only the Register-listed details is the most effective protection against clone fraud.

  • Public disciplinary history

    Where the FCA has taken formal action against a firm, the action is recorded on the Register and remains visible. A check before commitment can identify firms with a pattern of regulatory failures.

Two consumer-facing tools draw on the same underlying database. The full Financial Services Register is the comprehensive version. The simpler FCA Firm Checker is designed for consumers and walks the user through the necessary steps. Both are free to use and updated daily. Our guide on verifying FCA authorisation explains the check in detail and walks through how to interpret the results.

How the FCA enforces its rulebook

The FCA's enforcement powers are real and have been used consistently. The 2024/25 figures provide a clear picture of how the regulator turns its rulebook into practical consumer protection.

FCA enforcement · 2024/25
A regulator with real powers
Action Number or value What it means
Fines issued£124m totalSpread across 37 final notices against firms and individuals
Authorisations cancelled1,456 firmsFirms permanently removed from the Register
Criminal convictions5 individualsCustodial sentences in some cases
Voluntary redress secured£354.6mMoney the FCA pressed firms to pay customers
Largest individual fine£39.3m (Barclays)For misleading the regulator and customer treatment failings
Largest neobank fine£21.1m (Monzo)For financial crime control failures

Enforcement action takes several forms beyond fines. The FCA can impose business restrictions (preventing a firm from taking on new customers or entering new product lines), require the appointment of a skilled person to investigate at the firm's expense or revoke authorisation entirely. Where conduct is criminal, the FCA can prosecute or refer cases to the police and the Serious Fraud Office.

What is the FCA doing about motor finance commissions?

The FCA finalised its industry-wide motor finance redress scheme in policy statement PS26/3 on 30 March 2026. The scheme covers motor finance agreements entered into between 6 April 2007 and 1 November 2024 where commission was paid to a broker without proper disclosure. The FCA estimates total redress of £7.5 billion across approximately 12.1 million eligible agreements, with average compensation of around £830 per agreement. Implementation runs from mid-2026, with the vast majority of cases settled by the end of 2027. Consumers who took out motor finance during the scheme period may be eligible.

How to use these protections in practice

Knowing the FCA exists is one matter. Using its protections when something goes wrong is another. The following sequence sets out the standard approach when a regulated firm has caused harm.

  1. Confirm the firm is FCA-authorised

    The first step is always to check the FCA Register. If the firm is authorised, the protections set out below apply. If the firm is not authorised, different routes apply, as covered in our guide on scams and loan sharks.

  2. Complain to the firm in writing

    FCA rules require every authorised firm to operate a complaints procedure and to issue a final response within 8 weeks. The complaint should be made clearly and in writing, with copies retained. The 8-week clock begins on the date the firm receives the complaint.

  3. Escalate to the Financial Ombudsman Service

    If the firm's final response is unsatisfactory or if no response is issued within 8 weeks, the consumer is entitled to refer the matter to the Financial Ombudsman Service. The Ombudsman is free, independent and binding on the firm. The deadline for referral is 6 months from the firm's final response.

  4. Quantify and claim compensation where loss has been suffered

    Where the firm's conduct has caused financial loss, our guide on claiming compensation for unfair lending sets out how to calculate what is owed and how to support the claim with evidence. The FOS can award up to £455,000 from 1 April 2026 for acts on or after 1 April 2019.

  5. Use the FSCS where the firm has failed

    The Financial Services Compensation Scheme (FSCS) is the safety net for cases where an authorised firm has gone out of business. The current limit is £85,000 per person per firm for most claims (£120,000 for deposits since 1 December 2025). The FSCS is free to use and does not require a claims management company.

Common misconceptions about the FCA

The FCA is widely misunderstood, sometimes by people who have dealt with it for years. The four misconceptions below are particularly common and worth correcting before relying on the regulator's protections.

Myth

"The FCA stops bad firms before they harm anyone."

Truth

False. Authorisation is a high bar at entry, but firms can still cause harm before being detected. The Register confirms authorisation status, but it does not guarantee the firm will treat every customer well.

Myth

"You can take an individual complaint to the FCA and they will resolve it."

Truth

False. The FCA does not adjudicate individual disputes. Complaints between consumers and firms go to the Financial Ombudsman Service. The FCA acts on patterns of harm rather than single cases.

Myth

"FCA-authorised means the product is safe to invest in."

Truth

False. FCA authorisation regulates a firm's conduct. It does not eliminate investment risk. A consumer can lose money in an authorised investment if the underlying market falls. Authorisation guarantees the firm follows the rules, not that any investment will succeed.

Myth

"The FCA is too soft on the major banks."

Truth

False. Major firms received the largest fines in 2024/25: Barclays £39.3m, Monzo £21.1m, Volkswagen Financial Services £5.4m plus £21.5m in customer redress. Larger firms attract larger sanctions in proportion to consumer impact.

What the FCA cannot do

Realistic expectations of the FCA improve the chances of using the system effectively. Three boundaries are worth understanding clearly.

The FCA does not adjudicate individual disputes. A complaint about a specific firm's specific conduct goes to the Financial Ombudsman Service, not to the FCA. The FCA collects complaint data and uses it to identify patterns, but it will not investigate or rule on a particular consumer's complaint.

The FCA does not pay compensation directly. Fines collected by the FCA pass to HM Treasury, not to consumers. Consumer compensation comes from the firm itself (voluntarily or under FOS direction), from a court order or from the FSCS where the firm has failed. The regulator drives the compensation but does not make the payment.

The FCA does not regulate investment performance. An FCA-authorised platform that follows all the rules can still hold an investment whose value falls. The regulator ensures the firm operates fairly and discloses risks; it does not prevent market losses. Investment risk is borne by the investor.

For matters that fall outside the FCA's remit, alternative routes exist. Pension scheme disputes go to the Pensions Ombudsman. Property agent complaints go to the Property Ombudsman or Property Redress Scheme. Tax matters go to HMRC and ultimately the tax tribunals. Court action remains available in any case where the consumer prefers a binding legal judgment.

Common questions

Frequently asked questions.

Is the FCA the same as the FSA?

No, although the two are closely related. The Financial Services Authority (FSA) was the UK's single financial regulator from 2001 to 2013. Following criticism of the FSA's performance during the 2008 financial crisis, Parliament restructured UK financial regulation under the Financial Services Act 2012.

On 1 April 2013, the FSA was abolished and its functions split between two new bodies: the Financial Conduct Authority (FCA), responsible for conduct regulation and consumer protection; and the Prudential Regulation Authority (PRA), responsible for prudential regulation of banks, insurers and major investment firms. The FCA is therefore the successor body for conduct and consumer-protection purposes.

References to FSA authorisation in older documents typically refer to the same firms now regulated by the FCA, although the rule book has changed substantially since 2013.

What is the difference between the FCA and the PRA?

The FCA and the Prudential Regulation Authority (PRA) regulate different aspects of UK financial services. The FCA is the conduct regulator. It is responsible for how firms behave towards their customers, including fairness, transparency, treating customers in vulnerable circumstances appropriately and complying with the Consumer Duty.

The PRA is the prudential regulator. It is responsible for the financial stability of banks, insurers and major investment firms, including capital adequacy, liquidity and resolvability if a firm fails. Banks, insurers and major investment firms are 'dual-regulated' by both bodies.

Most other firms (consumer lenders, brokers, smaller investment firms, payment providers, mortgage intermediaries) are regulated by the FCA alone. For consumers, the FCA is almost always the relevant regulator. The PRA does not adjudicate consumer issues.

Can I complain to the FCA directly about a firm that has treated me badly?

The FCA does not adjudicate individual consumer complaints. Disputes between consumers and authorised firms are handled by the Financial Ombudsman Service. The FOS is free, independent and binding on the firm.

Where the FCA does want to hear from consumers is in the form of intelligence: information about firm behaviour that may indicate a wider pattern of harm. The FCA collects this information through its consumer contact channels and uses it to identify firms requiring supervisory or enforcement action. Reporting concerns to the FCA does not result in compensation for the individual reporting, but it can contribute to action that protects other consumers in future.

For an individual remedy, the route is to complain to the firm in writing, wait for the final response or 8 weeks (whichever is sooner) and then refer the matter to the Financial Ombudsman Service.

How is the FCA funded and is it really independent of the firms it regulates?

The FCA is funded by fees levied on the firms it regulates, not by central government. This funding model is established by statute and is not optional for firms. Each authorised firm pays an annual fee proportionate to its size and the activities it carries out, plus additional levies that fund the Financial Ombudsman Service and the Financial Services Compensation Scheme.

The funding model is designed to keep the regulator independent of government budget cycles and political pressures. The FCA's accountability runs through Parliament rather than through the firms it regulates. The board is appointed by HM Treasury. The FCA reports annually to Parliament on its performance against its statutory objectives.

The arrangement is intended to combine financial independence from the taxpayer with political accountability through legislative oversight.

Does the FCA regulate cryptocurrency?

The FCA's regulation of cryptocurrency is limited and currently in the process of being expanded. The FCA registers cryptoasset firms for anti-money laundering purposes under the Money Laundering Regulations 2017. This registration confirms the firm has adequate financial-crime controls, but it is not the same as full conduct authorisation and does not provide the consumer protections that apply to other regulated products.

Most cryptocurrency activities (trading, custody, lending in stablecoins or other digital assets) sit outside the FCA conduct rulebook. Consumers therefore have no FOS escalation route in most cases. The FSCS does not protect funds held with crypto firms.

The FCA has consulted on a fuller cryptoasset regime and a comprehensive prudential framework is in development, with proposals issued in late 2025 and rules expected to take effect in stages from 2026 onwards. Until that regime is fully operational, cryptocurrency remains a high-risk area where consumer protection is far weaker than in regulated financial services.

Mark Scott, Company Director at Swift Money
Written by
Mark Scott
Company Director, Swift Money Limited

Mark founded Swift Money in 2011, four years before the FCA's price cap transformed UK short-term lending. He has over 15 years of experience in UK consumer finance and oversees all content published on swiftmoney.com.

Important information

This guide is not personalised financial advice, legal advice or a substitute for regulated debt counselling. Individual circumstances vary and the right course of action depends on your own financial position. If you need help with a specific situation, speak to a qualified adviser or a free debt advice service such as StepChange, Citizens Advice, National Debtline or MoneyHelper.

Rules, retention periods, thresholds and scheme details reflect UK law, FCA guidance and industry practice as at April 2026. Credit scoring models are proprietary and individual outcomes may differ from the general principles described here. We update our guides periodically but cannot guarantee every figure reflects the very latest position. Always check the underlying source for time-sensitive decisions.

Swift Money Limited is a credit broker, not a lender. We are authorised and regulated by the Financial Conduct Authority, FRN 738569. Registered in England and Wales, company number 07552504. Registered office: Hamill House, 112 - 116 Chorley New Road, Bolton, BL1 4DH, United Kingdom. Data Protection registration number ZA069965.