Whether you are processing card payments, servicing direct debits, or building next-generation payment infrastructure, FCA authorisation as a Payment Institution is a prerequisite for operating in the UK market. The application process is exacting, and the FCA's expectations of firms continue to rise.
We tailor every application to reflect the realities of your business model, customer base and risk profile. Our consultants draw on direct experience of FCA policy and supervision to build applications that are commercially credible and regulator-ready. We don’t produce generic submissions; we produce ones that withstand scrutiny.
Our support extends well beyond authorisation. Payment services regulation imposes continuous obligations, and the regulatory environment is changing. We provide ongoing compliance support across safeguarding, financial crime, prudential requirements and regulatory change, so your compliance framework keeps pace with your growth.
Authorisation as a Payment Institution demands rigour, precision and a clear demonstration of your control framework. We bring the regulatory insight and application expertise to get you through it and set you up for sustainable growth.
The US market demands SEC compliance across multiple jurisdictions. Our specialists manage the entire process so you can focus on the opportunity ahead.
Consumer Duty places significant obligations on payment firms. We help you identify compliance gaps, embed fair outcome practices and evidence your commitment to the standard including through our structured Compliance Monitoring Programme.
How long does the FCA authorisation process take for a Payment Institution?
Timelines vary depending on the complexity of your application and the FCA's caseload. The quality and completeness of your submission have a significant bearing on how smoothly the process runs. Our team is experienced in preparing applications that minimise delays and reduce the volume of FCA queries. Speak to us early in the process to understand what to expect and how we can help.
What is the difference between an Authorised Payment Institution and a Small Payment Institution?
The two categories of payment institution have different regulatory requirements and operational thresholds. Which is right for your business depends on your specific model, transaction volumes and growth plans. This is exactly the kind of question we help clients work through at the outset get in touch for a scoping conversation, and we can help you understand your options.
What does a safeguarding audit involve and why does it matter?
Safeguarding is one of the FCA's highest priorities for payment firms, and the requirements have become significantly more detailed following recent regulatory reforms. A safeguarding audit provides independent assurance that your firm is meeting its obligations and identifies any gaps before the regulator does. Our team conducts independent safeguarding audits for payment firms of all sizes. Speak to us to understand what an audit involves and what it would look at in your business.
We are already authorised. Can Cosegic help us with ongoing compliance rather than a new application?
Absolutely, and this is a significant part of what we do. We support authorised Payment Institutions through structured compliance monitoring programmes, financial crime audits, regulatory reporting support, board advisory services, training and more. If you are looking for a long-term compliance partner rather than a one-off project, speak to our team about how a retainer arrangement could work for your firm.
What happens if the FCA raises concerns or queries during our application?
FCA queries during the authorisation process are not unusual, but how you respond to them matters considerably. We support clients through the full post-submission phase from drafting responses to FCA feedback to managing the ongoing dialogue with the regulator. If you are already in the process and have received queries, speak to us, and we can discuss how we may be able to help.
Accessibility Adjustments
Cosegic Accessibility Commitment
At Cosegic, we are committed to making our digital presence as accessible and inclusive as reasonably possible for all users, including people with disabilities. Our goal is to improve the usability of https://www.cosegic.com and support a more accessible experience for everyone, regardless of their abilities or the technologies they use.
Our Approach to Accessibility
We aim to align with the Web Content Accessibility Guidelines (WCAG), which define internationally recognised standards for digital accessibility. While full compliance cannot always be guaranteed, we strive to implement improvements where possible and regularly review accessibility-related aspects of our website. Accessibility is an ongoing process, and we are committed to improving the experience over time as technologies, standards, and user needs evolve.
Accessibility Features
To support accessibility, https://www.cosegic.com may utilise tools such as the OneTap accessibility toolbar. This interface provides users with a variety of helpful features, including:
Adjustable text size and contrast settings
Highlighting of links and text for better visibility
Full keyboard navigation of the toolbar interface
Quick launch via keyboard shortcut: Alt + . (Windows) or ⌘ + . (Mac)
Please note the following:
The availability and effectiveness of these features depend on the website's configuration and ongoing maintenance.
While we strive to ensure accessibility, we cannot guarantee that every part of https://www.cosegic.com is fully accessible at all times. Some content may be provided by third parties or affected by technical limitations outside our immediate control.
Feedback and Contact
We welcome your feedback. If you encounter accessibility barriers or have suggestions for improvement, please contact us: Email: [email protected] We are committed to reviewing all enquiries and aim to respond within 3–5 business days. If you need assistance accessing any part of this website, we are happy to provide support through alternative channels upon request. Last updated: 7 October 2026
How long do you want to hide the toolbar?
Select your accessibility profile
Vision Impaired Mode
Enhances website's visuals
Seizure Safe Profile
Clear flashes & reduces color
ADHD Friendly Mode
Focused browsing, distraction-free
Blindness Mode
Reduces distractions, improves focus
Epilepsy Safe Mode
Dims colors and stops blinking
Content Modules
Font Size
Default
Line Height
Default
Color Modules
Orientation Modules
Cookie Consent
COOKIES
We use cookies to improve your experience and understand how our site is used. Choose which cookies we can set - you can change your mind at any time via the Cookie policy.
Cookie Preferences
Manage your cookie preferences below:
Essential cookies enable basic functions and are necessary for the proper function of the website.
Name
Description
Duration
Cookie Preferences
This cookie is used to store the user's cookie consent preferences.
30 days
CloudFlare provides web performance and security solutions, enhancing site speed and protecting against threats.
These cookies are for internal use which allows Cloudflare to identify production issues on clients.
session
cf_ob_info
The cf_ob_info cookie provides information on: The HTTP Status Code returned by the origin web server. The Ray ID of the original failed request. The data center serving the traffic
session
__cfseq
Sequence rules uses cookies to track the order of requests a user has made and the time between requests and makes them available via Cloudflare Rules. This allows you to write rules that match valid or invalid sequences. The specific cookies used to validate sequences are called sequence cookies.
session
cf_clearance
Whether a CAPTCHA or Javascript challenge has been solved.
session
_cfuvid
The _cfuvid cookie is only set when a site uses this option in a Rate Limiting Rule, and is only used to allow the Cloudflare WAF to distinguish individual users who share the same IP address.
session
__cflb
When enabling session affinity with Cloudflare Load Balancer, Cloudflare sets a __cflb cookie with a unique value on the first response to the requesting client. Cloudflare routes future requests to the same origin, optimizing network resource usage. In the event of a failover, Cloudflare sets a new __cflb cookie to direct future requests to the failover pool.
session
__cf_bm
Cloudflare's bot products identify and mitigate automated traffic to protect your site from bad bots. Cloudflare places the __cf_bm cookie on End User devices that access Customer sites that are protected by Bot Management or Bot Fight Mode. The __cf_bm cookie is necessary for the proper functioning of these bot solutions.
session
__cfruid
Used by the content network, Cloudflare, to identify trusted web traffic.
session
cf_chl_rc_m
These cookies are for internal use which allows Cloudflare to identify production issues on clients.
session
cf_chl_rc_ni
These cookies are for internal use which allows Cloudflare to identify production issues on clients.
session
__cfwaitingroom
The __cfwaitingroom cookie is only used to track visitors that access a waiting room enabled host and path combination for a zone. Visitors using a browser that does not accept cookies cannot visit the host and path combination while the waiting room is active.
session
cf_use_ob
The cf_use_ob cookie informs Cloudflare to fetch the requested resource from the Always Online cache on the designated port. Applicable values are: 0, 80, and 443. The cf_ob_info and cf_use_ob cookies are persistent cookies that expire after 30 seconds.
session
These cookies are needed for adding comments on this website.
Name
Description
Duration
comment_author_url
Used to track the user across multiple sessions.
Session
comment_author_email
Used to track the user across multiple sessions.
Session
comment_author
Used to track the user across multiple sessions.
Session
These cookies are used for managing login functionality on this website.
Name
Description
Duration
wordpress_test_cookie
Used to determine if cookies are enabled.
Session
wordpress_sec
Used to track the user across multiple sessions.
15 days
wordpress_logged_in
Used to store logged-in users.
Persistent
Statistics cookies collect information anonymously. This information helps us understand how visitors use our website.
Google Analytics is a powerful tool that tracks and analyzes website traffic for informed marketing decisions.
Contains information related to marketing campaigns of the user. These are shared with Google AdWords / Google Ads when the Google Ads and Google Analytics accounts are linked together.
90 days
__utma
ID used to identify users and sessions
2 years after last activity
__utmt
Used to monitor number of Google Analytics server requests
10 minutes
__utmb
Used to distinguish new sessions and visits. This cookie is set when the GA.js javascript library is loaded and there is no existing __utmb cookie. The cookie is updated every time data is sent to the Google Analytics server.
30 minutes after last activity
__utmc
Used only with old Urchin versions of Google Analytics and not with GA.js. Was used to distinguish between new sessions and visits at the end of a session.
End of session (browser)
__utmz
Contains information about the traffic source or campaign that directed user to the website. The cookie is set when the GA.js javascript is loaded and updated when data is sent to the Google Anaytics server
6 months after last activity
__utmv
Contains custom information set by the web developer via the _setCustomVar method in Google Analytics. This cookie is updated every time new data is sent to the Google Analytics server.
2 years after last activity
__utmx
Used to determine whether a user is included in an A / B or Multivariate test.
18 months
_ga
ID used to identify users
2 years
_gali
Used by Google Analytics to determine which links on a page are being clicked
30 seconds
_ga_
ID used to identify users
2 years
_gid
ID used to identify users for 24 hours after last activity
24 hours
_gat
Used to monitor number of Google Analytics server requests when using Google Tag Manager
1 minute
You can find more information in our Cookies and .
Book a Personalised Demo
Tell us a little about your firm and what you're looking to achieve. We'll arrange a personalised demo with the right product specialist and show you how our solution can meet your needs.
"*" indicates required fields
Fill in your details below to download your free checklist