How to Launch a Money Transfer Business in the UK: 2026 Complete Guide

Who this is for

You are launching a money transfer business in the UK, or you have just been authorised and are working out what happens next. This is the whole route: the two FCA permissions and which one you qualify for, the application pack document by document, how safeguarding actually works, what delays applications, and what a refusal looks like if it comes.

Software is the last section, deliberately. It is the smallest decision on this page and the one everybody makes first.

1. SPI or API: the threshold that decides everything

There are two routes, and the split is a single number.

You can register as a small payment institution if the average of the preceding twelve months’ payment transactions “does not exceed 3 million euros (or an equivalent amount) per month”. Above that, you must apply for authorisation as an authorised payment institution. PERG 15.4, Q26.

Two consequences people miss:

• Small PIs cannot provide account information services or payment initiation services. If you want either, you need full authorisation regardless of your volume.
• Small PIs have no initial capital requirement. The FCA’s capital chapter states plainly that it “is not relevant to small PIs” (Our Approach, 9.1). You will still need working capital to run the business — that is a commercial question, not a regulatory one.

Initial capital applies to authorised PIs, and the amount depends on what you do: €20,000 for money remittance, €50,000 for payment initiation services, €125,000 for the services in Schedule 1 Part 1(1)(a) to (e). Where more than one applies, you hold the greater amount. Our Approach, 9.7–9.8.

If you are close to €3m, model it honestly. Registering as a small PI and outgrowing it means applying for authorisation later anyway, with the disruption landing exactly when the business is working.

2. The application pack, document by document

The FCA lists what an applicant must provide. Both routes need:

• Programme of operations — the payment services you intend to provide, and how.
• Details of the individuals responsible for the payment services business and for managing the firm.
• Anyone with a qualifying holding.
• Control mechanisms to meet your obligations under the Money Laundering Regulations.
• Your measures to safeguard payment service users’ funds.
• Procedures for incident reporting, data management and business continuity.
• A security policy, and a policy for security-related customer complaints.
• MLR registration details.
• Outsourcing arrangements and any plans to use agents.

Authorised PI applicants additionally need financial information, a wind-down plan, documented governance arrangements, internal controls and risk management procedures, and — for account information or payment initiation services — professional indemnity insurance or a comparable guarantee. FCA, Payment institution applicants.

Everyone with a qualifying holding must be a fit and proper person “having regard to the need to ensure the sound and prudent conduct” of the business, and directors and managers must be of good repute with appropriate knowledge and experience. Nobody managing or operating the business may have been convicted of offences relating to money laundering, terrorist financing, the payment services regulations, or financial crime. The firm must have its head office or registered office in the UK and carry on payment services business here. PERG 15.4.

3. Safeguarding, mechanically

This is where applications get sent back, so it is worth being precise.

There are exactly two methods: the segregation method, or the insurance or comparable guarantee method. You may use one for some relevant funds and the other for the rest. Our Approach, 10.36.

Segregation is not a book entry. The FCA is explicit: “It would not be sufficient to segregate funds in the institution’s books or records; if held electronically, the funds must be held in a separate account at a third party account provider, such as a credit institution. Funds held in banknotes and coins must be physically segregated.” (10.39)

The mechanics:

• Segregate as soon as funds are received — not at end of day, not at reconciliation. (10.39)
• If funds are still held at the end of the business day following receipt, deposit them in a separate account with an authorised credit institution or the Bank of England, or invest them in secure liquid assets the FCA approves and place those with an authorised custodian. (10.38)
• Mixed receipts — where a customer pays relevant funds and your fees together — must be split “as frequently as practicable throughout the day”, and “in no circumstances should such funds be kept commingled overnight”. (10.40)
• Agents and distributors holding funds on your behalf do not transfer the obligation. You remain responsible for ensuring they segregate. (10.41)

Small PIs are not required to safeguard. A small PI that chooses to can offer users the same protection an authorised PI must provide. Whichever you decide, record the decision and the reasoning — and confirm the current position with the FCA before you rely on it.

Practical note: opening a segregated account is frequently the longest lead item in the whole launch, and it is not within your control. Start it early.

4. HMRC money service business registration

Money transfer businesses generally need to be registered with HMRC as a money service business for anti-money-laundering supervision, separately from anything the FCA does. MLR registration details form part of the FCA application, so the two run in parallel rather than in sequence. Check the current requirements, fees and timescales directly with HMRC — they change, and we would rather point you at the source than restate a figure that has moved.

5. Timelines, and what actually causes delay

The rule that governs everything:

The clock does not start when you submit. It starts when the FCA agrees your pack is complete. Where an application is incomplete they ask in writing for more, then “confirm the date from which we consider the application to be complete” — and the three months runs from that date. (3.17)

There is an outer limit. For an incomplete application the FCA “must make a decision within 12 months of receipt”, and they say plainly that if discussions have not produced everything they need within that window, “it is likely that the application will be refused” — because they will not have been able to satisfy themselves the requirements are met. (3.200)

So the honest framing is not “how long does approval take”. It is how long does it take you to become complete. Everything that slips does so before the clock starts:

• The safeguarding account. Bank onboarding for a pre-authorisation payments firm is slow and outside your control.
• Fitness and propriety evidence for individuals, particularly anyone overseas.
• A programme of operations that describes ambition rather than operations. If it does not match your actual flows, expect questions.
• AML documents written to be filed rather than used. A risk assessment that does not reflect your corridors is visible immediately.
• Provider contracts — the FCA may ask to see drafts.

6. Further information requests, and refusal

A request for further information is normal, not a bad sign. The FCA can require further information at any point before determining an application, and will ask in writing where the pack is incomplete. (3.17)

Refusal has a defined process, and it is worth knowing it exists before you need it:

• The FCA can refuse “when the information and evidence provided does not satisfy the requirements” of the PSRs 2017. (3.206)
• They must give a warning notice setting out the reason, and allow 28 days to make representations. (3.206)
• Representations may be oral or written. For oral representations, notify within two weeks of the warning notice so a meeting can be arranged inside the 28 days. (3.207)
• If refusal stands, a decision notice follows, and the firm may refer the matter to the Upper Tribunal (Financial Services). If no referral is made within 28 days, a final notice is issued. (3.208)

Read that as reassurance rather than threat: refusal is a process with representations built into it, not a door closing without warning.

7. Choosing payout, KYC and gateway providers

These are commercial decisions with regulatory consequences, and they are yours to make directly.

Payout partners determine which corridors you can actually serve, at what cost, and how fast funds land. Coverage claims are the least reliable thing in this market: “150 countries” via one aggregator behaves very differently from direct relationships in your three real corridors. Ask what happens when a payout fails, who holds the funds while it is investigated, and what the reconciliation file looks like.

KYC and screening providers need to match your customer base, not a generic average. Document coverage for the nationalities you actually serve matters more than headline pass rates, and you will need sanctions and PEP screening with a defensible tuning and review process.

Payment gateways determine how money comes in. Check settlement timing carefully — it interacts directly with your safeguarding obligations, because funds you have received are relevant funds whether or not your gateway has settled them to you.

Contract with these providers yourself. If a software vendor sits between you and your providers, they hold the relationships, the margin and the leverage — and you inherit their outage as your regulatory incident. Whatever platform you choose, the provider agreements should be in your name.

8. Software

Last, and genuinely least. By this point you know your corridors, your providers, your permission type and your safeguarding model — and those inputs determine what the software has to do. Choosing a platform first is choosing before you know the requirements.

What matters:

• Does it produce the evidence a regulator asks for? Audit trails, transaction monitoring output, and the returns your permission requires — small PIs file the FSA057 Small Payment Institution Return (SUP 16 Annex 28D).
• Does it integrate the providers you chose, rather than the providers it resells?
• Can you leave? Data export, and whether the provider relationships are in your name.
• Build or buy. Building means the compliance surface is yours to maintain forever, not just to write once.

Remitz is one option among several, and this guide is deliberately usable without it.

Your Pre-Launch Checklist

Use this checklist as your go/no-go decision framework. Every item must be a "yes" before live operations begin.

• ☐ FCA SPI registration or API authorisation granted and published on the Financial Services Register
• ☐ HMRC MSB registration confirmed
• ☐ MLRO appointed, named in FCA application, and operationally ready
• ☐ AML/KYC policy approved and staff trained
• ☐ Regulatory capital evidenced and held
• ☐ Customer-fund safeguarding arrangements in place (API only)
• ☐ Software platform configured and white-labelled
• ☐ KYC provider integrated and tested
• ☐ Sanctions and PEP screening live
• ☐ Payout partners contracted in every launch corridor
• ☐ FX rates and corridor margins configured
• ☐ Customer-facing web portal and mobile app published
• ☐ Transactional email and SMS templates white-labelled
• ☐ Terms of service, privacy policy, and customer agreements published
• ☐ Regulatory reporting exports tested
• ☐ Complaints-handling process documented
• ☐ Business continuity and disaster recovery tested

Further Reading Across the Launch Journey

• How to Start a Money Transfer Business in the UK — the long-form explainer version of this playbook.
• Agent Network Management for Remittance Businesses — hierarchy, commission, settlement, agent-level compliance.
• Money Transfer Business Software: Build vs Buy 2026 — the technology decision.
• Ready-Made SPI Licence UK — should you buy a pre-authorised firm?
• White-Label eWallet Software: Buyer's Guide 2026 — adding a wallet to your launch.