A Practical Guide for Compliance Teams Preparing for FCA Regulation
With Buy-Now-Pay-Later (BNPL) regulation now confirmed for implementation in July 2026, firms operating in or entering the sector must prepare for a full transition into the FCA’s regulatory perimeter. For many compliance professionals, this will involve navigating the FCA authorisation process for the first time while also managing historic activity carried out before regulation takes effect.
The scale of change should not be underestimated. Once the regime goes live, BNPL lenders will be regulated in much the same way as other consumer credit firms, subject to authorisation requirements, ongoing supervision and Consumer Duty obligations.
This blog sets out practical guidance for compliance teams preparing to secure authorisation and manage the transition effectively.
Understanding the authorisation requirement
From July 2026, firms providing third-party BNPL (deferred payment credit) will need FCA authorisation to continue operating. Firms already active in the market are expected to enter the temporary permissions regime (TPR), allowing them to continue trading while their full authorisation application is assessed.
However, temporary permission should not be viewed as a grace period. FCA conduct expectations will apply immediately, meaning firms must be able to demonstrate compliant operations from day one.
Compliance teams should therefore approach the authorisation process as both a regulatory application exercise and a full operational readiness review.
Step one: confirm permissions and regulatory scope
Firms should begin by mapping their activities carefully. Key questions include:
- Are we acting as lender, broker or both?
- How are BNPL products structured and distributed?
- Which regulated permissions will be required?
This initial regulatory mapping will form the foundation of the authorisation application and determine the level of FCA scrutiny applied.
Where firms operate through complex merchant or introducer arrangements, particular attention should be given to distribution oversight and accountability for customer outcomes.
Step two: prepare governance and Consumer Duty frameworks
Governance and oversight will be central to the FCA’s assessment. Firms must demonstrate:
- clear board and senior management accountability,
- effective compliance and risk functions, and
- robust oversight of customer outcomes.
Consumer Duty will apply fully to BNPL. Compliance teams should ensure the firm can evidence:
- fair value assessments,
- clear and balanced communications,
- effective complaints handling, and
- appropriate support for vulnerable customers.
The FCA will expect these frameworks to be embedded operationally rather than existing solely as documented policies.
Step three: evidence affordability and operational controls
Affordability and creditworthiness checks are likely to be one of the most scrutinised areas of BNPL authorisation.
- Firms must be able to demonstrate:
- how affordability is assessed before lending,
- what data and decisioning tools are used,
- how outcomes are monitored, and
- how customers in financial difficulty are supported.
Operational readiness should also include complaints processes aligned with DISP, clear customer communications and robust management information to support oversight.
Managing historic activity and legacy risk
One of the most important, and often overlooked, aspects of BNPL regulation is how firms manage historic activity conducted before regulation begins.
While pre-regulation lending may not have been subject to full FCA rules at the time, firms should expect regulatory scrutiny of legacy practices once authorised. The FCA is likely to assess whether historic customer outcomes, affordability approaches and communications could create future complaints or redress exposure.
- Compliance teams should therefore:
- conduct internal reviews of historic BNPL lending and complaints trends,
- identify any practices that may present conduct or remediation risk, and
- document decisions and rationale around legacy treatment.
Taking a proactive approach to historic risk will help avoid issues surfacing later during supervision or Ombudsman engagement.
Engage early and prepare thoroughly
The FCA has indicated that pre-application engagement will be available to BNPL firms. Compliance teams should use this opportunity to clarify expectations and test readiness before submitting formal applications.
Experience from consumer credit authorisations shows that applications supported by clear governance, well-developed policies and demonstrable operational controls progress far more smoothly than those still building frameworks during the process.
Final thoughts
BNPL regulation represents a defining moment for the sector. Authorisation will require firms to demonstrate that they operate to the same standards as other regulated consumer credit providers — across governance, affordability, complaints and customer outcomes.
For compliance professionals, the priority now is preparation. By confirming permissions, strengthening frameworks and reviewing historic activity, firms can approach the authorisation process with confidence and minimise disruption as regulation comes into force.
Those that act early will be best positioned to secure authorisation smoothly and operate successfully within the newly regulated BNPL landscape.
How ALPH Legal & Compliance Can Support BNPL Firms
The transition to a fully regulated BNPL environment will require careful planning, robust governance and a clear, well-structured authorisation strategy. For many firms, this will be their first experience of the FCA application process and early, structured preparation will make a significant difference to both timelines and outcomes.
ALPH Legal & Compliance supports BNPL providers and financial services firms at every stage of the regulatory journey, including:
- End-to-end FCA authorisation support for BNPL permissions, from initial scoping and regulatory mapping through to full application submission and FCA engagement
- Pre-application readiness reviews, ensuring governance, policies and operational frameworks meet FCA expectations before submission
- Independent compliance and operational audits, identifying gaps across affordability, complaints handling, Consumer Duty and oversight frameworks
- Policy development and implementation, aligned to consumer credit, DISP and Consumer Duty requirements
- Ongoing compliance and governance support, helping firms embed sustainable, regulator-ready frameworks as the new regime takes effect
Whether your firm is preparing for authorisation, entering the temporary permissions regime or reviewing historic activity ahead of regulation, early independent input can significantly reduce risk and streamline the approval process.
To discuss how ALPH can support your BNPL authorisation or readiness programme, get in touch directly.