On 9 July 2020, the UK Financial Conduct Authority (FCA) published a 'Dear CEO' letter (the "Letter") addressed to Authorised Payment Institutions and E-money Institutions ("Firms") highlighting 6 key areas where it has found that Firms are failing to adequately comply with their regulatory obligations under the Payment Services Regulations 2017 ("PSRs") and the Electronic Money Regulations 2011 ("EMRs"). Accompanying the Letter was additional temporary guidance (the Guidance) setting out the FCA's expectations for remedial action in these areas (supplementing existing guidance in the FCA Approach Document). Since both the Letter and the Guidance follow a short period of consultation on the relevant issues, the FCA also published a feedback statement providing information on the consultation responses received and how they have been reflected in the Letter and the Guidance.
The FCA identifies most of its areas of concern as arising from its normal supervisory engagement with the sector – in particular regular reviews of Firms' compliance with customer protection principles and rules. However, it is also clear that the FCA is worried that the coronavirus pandemic may challenge the customer protection provided by Firms – some of which it notes are in relatively early stages of their growth and yet to become profitable.
The six key areas of concern identified by the FCA are:
1. Safeguarding: a previous sector review carried out in the first half of 2019 identified various practices that the FCA was not happy with and led to the FCA directing Firms in a letter dated 4 July 2019 to improve their safeguarding arrangements in certain key respects. In the Letter, the FCA notes its disappointment that problems remain in the following critical areas:
2. Prudential risk management: the FCA identifies concerns regarding Firms:
3. Financial crime: the FCA states that a review of the AML processes of 100 different Firms revealed several material failures in Firm systems and controls and emphasises the need for Firms to be aware of, and respond appropriately to, the financial crime risks inherent in their businesses, especially where innovative products or unusual business models are involved.
4. Financial promotions and consumer communications: the FCA has highlighted several issues with Firms' promotions (advertisements and websites), including claims about services and pricing that cannot be substantiated, the inappropriate use of the word "free" when describing the costs involved in currency conversions and inaccurate statements regarding the protection provided to customers by safeguarding arrangements in the event of a Firm insolvency – including suggestions that statutory deposit-protection covers e-money balances or that EMIs are forms of bank
5. Governance and oversight: the FCA is clearly of the view that regulatory compliance, and the operation of appropriate compliance processes, is not being given sufficient focus in many Firms – including at director/senior management level. The rapid recent growth of many Firms is identified as a particular problem here, meaning that regulated processes are being reviewed and updated to reflect such growth sufficiently frequently.
6. Record management and reporting: Firms are instructed to ensure that they maintain records to document their compliance with the PSRs and EMRs and to enable them to respond in a timely manner to ad hoc information requests from the FCA.
For each of the above areas of concern the Letter states the action that the FCA requires to be taken by any Firm with deficiencies in its regulatory compliance and threatens that the FCA will "act swiftly and decisively" (including by cancelling or restricting a Firm's permissions) if a Firm fails to meet its expectations. It also indicates that the FCA will be proactively identifying and contacting/visiting Firms where its analysis indicates that problems may exist in the identified areas.
The Letter closes with a timely reminder to Firms with EEA customers that, if they have not done so already, they will need to consider how the end of the Brexit transition period on 31 December 2020 will affect any ongoing relationship with those customers.
If you would like to receive our regular Payments alerts in your inbox, click here.