International Finance

The UK's sustainable-finance framework answers several different questions with several different tools. A listed-company disclosure helps price a security; an investment label helps a retail investor understand a product; a bank's climate-risk framework protects its resilience; and a green bond's documentation controls how proceeds are used. Combining them into one ESG compliance box creates false assurance.

This guide links sustainable finance to the UK capital-markets framework, the asset-management system and listed funds. It distinguishes rules already in force in August 2026 from voluntary standards and consultations, then shows how disclosures become—or fail to become—real capital-allocation decisions.

What sits inside the UK sustainable-finance architecture?

At the company layer, accounting and listing disclosures communicate material sustainability-related risks, opportunities, governance, strategy, metrics and targets. At the product layer, FCA SDR rules govern labels, names, marketing and investor information. At the prudential layer, the PRA supervises how banks and insurers identify and manage climate-related financial risk. Financing contracts add use-of-proceeds or performance-linked terms.

These layers overlap through data but have different users and tests. A bank can manage physical and transition risk without marketing a green product. A fund can hold a company with high current emissions under a credible improvers strategy. A company can publish a transition plan without qualifying every bond as green. Governance should map each claim to its rule, audience, entity and evidence rather than applying one group-wide ESG label.

How does sustainability information affect capital allocation?

Investors and lenders use climate and wider sustainability information to estimate cash-flow, asset, liability and financing effects. Physical hazards can disrupt operations, collateral and insurance; policy, technology and demand can strand high-carbon assets or create transition opportunities. Better information can alter valuation, required return, loan maturity, covenants, insurance terms or engagement priorities. It does not dictate one correct portfolio.

Capital moves through listed equity and debt, bank lending, project finance, private markets, infrastructure funds, insurance balance sheets and public programmes. Each channel has a different time horizon and control. A liquid fund can sell a security; a lender can set covenants; a private-equity owner can influence capex; a project financier can ring-fence cash. The transition claim is credible only where the chosen instrument can monitor and enforce its relevant promise.

What are UK SRS S1 and UK SRS S2?

The government published final UK Sustainability Reporting Standards in February 2026 after endorsing the ISSB baseline with UK amendments. UK SRS S1 sets general requirements for sustainability-related financial information; S2 focuses on climate-related risks and opportunities. They seek connected, investor-useful disclosure around governance, strategy, risk management, metrics and targets using financial materiality rather than a general corporate-impact report.

The standards were made available for voluntary use and contain no universal effective date of their own. An entity can adopt them voluntarily, while legal or regulatory requirements can later specify who must apply them and when. S1 and S2 should be used together where S2 is applied. Companies need processes that connect sustainability assumptions with financial statements, reporting perimeter, comparatives and governance—not a standalone narrative owned only by sustainability staff.

What must listed companies report today, and what may change?

Existing FCA listing rules require specified listed companies to make TCFD-aligned climate disclosures, commonly on a comply-or-explain basis depending on category. Although the original TCFD disbanded after the ISSB incorporated its architecture, current UK rules remain effective until the FCA replaces them. Issuers should not stop producing required reporting merely because the policy framework is moving toward UK SRS.

FCA CP26/5 proposed UK SRS-aligned requirements for several UK listing categories, with a proportionate approach to newer or difficult disclosures and greater transition-plan transparency. The consultation closed in March 2026. The FCA aimed to publish a policy statement in autumn 2026 and proposed rules from 1 January 2027. At the August review date, that timetable was an announced plan, not a final instrument; issuers should prepare without describing draft scope as settled.

What is a climate transition plan?

A transition plan explains how an entity intends to respond and contribute to a lower-carbon, climate-resilient economy. The TPT framework organised disclosure around foundations, implementation strategy, engagement strategy, metrics and targets, and governance. The ISSB later assumed responsibility for TPT materials and published transition-plan guidance supporting IFRS S2. A plan is part of strategy and financial disclosure, not a marketing pledge detached from budgets.

A decision-useful plan identifies material dependencies, assumptions, near-term actions, capex and opex, products, workforce, policy engagement, value-chain engagement, targets, accountability and monitoring. It distinguishes emissions reduction from offsets and explains uncertainty or constraints. A target year without an implementation pathway is not a plan; a detailed plan without board ownership or funding is not credible evidence that the transition will occur.

Are transition plans mandatory in the UK?

The government consulted in June 2025 on routes to require UK-regulated financial institutions and FTSE 100 companies to develop and implement credible plans aligned with the Paris Agreement's 1.5°C goal. Questions included entity scope, disclosure versus implementation duties, legal risk and interaction with UK SRS. At the August 2026 review date, the consultation had closed but no final economy-wide mandate had been implemented through that process.

Some firms already face transition-related disclosure through FCA listing or TCFD rules, prudential expectations, voluntary commitments, investor requests or contractual finance terms. Those obligations should not be confused with the consulted government mandate. A compliance inventory should identify the specific legal entity, reporting period and nature of each requirement: publish, explain, manage risk, meet a financing KPI or implement an operational action.

How do the four FCA sustainability labels work?

FCA SDR introduced four optional labels for qualifying UK investment products: Sustainability Focus, Sustainability Improvers, Sustainability Impact and Sustainability Mixed Goals. Each represents a different objective rather than a quality ranking. A product needs a clear, specific and measurable sustainability objective, suitable resources and governance, key performance indicators and a stewardship strategy with an escalation approach.

At least 70% of a labelled product's assets must normally be invested in accordance with its sustainability objective using a robust, evidence-based standard that is an absolute measure of sustainability. The balance must not conflict with the objective and must be disclosed. The manager notifies the FCA but must not imply that the regulator approved or endorsed the label. Eligibility and ongoing compliance remain the firm's responsibility as holdings and strategy change.

Sustainable-finance control layers compared

The same climate data may feed several controls, but the output and accountability differ. The table helps separate an issuer report, a fund label, a prudential assessment and a financing covenant before teams assume that evidence prepared for one automatically satisfies another.

What does the anti-greenwashing rule require?

The FCA's anti-greenwashing rule has applied since 31 May 2024 to all authorised firms when they communicate with UK clients about a product or service or communicate or approve a financial promotion. Sustainability-related references must be consistent with the actual characteristics and fair, clear and not misleading. The supporting guidance describes claims as correct and capable of substantiation, clear, complete and fair in comparisons.

The rule is broader than labelled funds. It can reach a bank account, bond, insurance product, investment strategy or corporate communication within scope. Images, colour, product names and omissions contribute to the overall impression. Evidence should match the claim's granularity and period: buying renewable electricity for an office does not substantiate calling an entire loan book net zero, and a future target should not be presented as a current product characteristic.

How do naming, marketing and distributor rules differ from labels?

An in-scope product can make sustainability claims without using a label, but FCA naming and marketing rules then govern terms such as sustainable, green, climate or impact. The name and communications must meet the applicable criteria and be supported by consumer-facing and more detailed disclosures. Firms should explain clearly that the product has no label rather than leaving a retail investor to infer equivalence.

Distributors must make product-level sustainability information and labels available to retail investors and keep it consistent with manager information. A platform's search filters, badges and short descriptions can create a new claim even when copied from source data. Governance needs versioned feeds, exception handling and removal when a label changes. Overseas products marketed in the UK have specific disclosure and notice treatment; a foreign label is not automatically an FCA label.

What does PRA SS5/25 require from banks and insurers?

PRA SS5/25 replaced the earlier SS3/19 expectations and applies proportionately to UK banks, building societies, PRA-designated investment firms and insurers within scope. It covers governance, risk management, climate scenario analysis, data and disclosure, with banking- and insurance-specific context. Boards and senior managers should integrate climate-related risk into strategy and existing risk types rather than maintain an isolated ESG register.

The PRA's 2026/27 plan said firms should review their status and, from June 2026, be able to demonstrate a credible and ambitious timetable to close gaps. Proportionality follows materiality, size and exposure; it is not permission to ignore a poorly measured risk. Credit, market, insurance, operational and reputational transmission channels need appropriate horizons, data, scenarios, limits and management action. The aim is resilience, not supervisory selection of a green portfolio.

Why did the UK decide against a Green Taxonomy?

A green taxonomy classifies economic activities against environmental criteria. After consultation, the government announced in July 2025 that a UK Taxonomy would not be the most effective tool and would not form part of the sustainable-finance framework. Respondents questioned additional value, complexity and the difficulty of representing transition activity through a binary classification. Other policies were prioritised.

The decision removes a common source of false claims: there is no live official UK taxonomy percentage that every company or fund must report. Firms can use international taxonomies or private standards where relevant, but should identify the exact version, thresholds, estimates and purpose. A bond described as taxonomy-aligned in another jurisdiction has not received a UK government seal, and taxonomy alignment alone would not answer credit quality, additionality or transition-plan credibility.

How do green bonds and sustainability-linked finance differ?

A green bond or loan generally dedicates proceeds to eligible projects or expenditures under a framework, with allocation and impact reporting. Credit exposure usually remains to the issuer or borrower unless the instrument is project-specific. A sustainability-linked bond or loan can fund general purposes while changing pricing or another term when the borrower meets or misses defined performance targets. One controls use of money; the other creates a performance incentive.

Due diligence should test eligible categories, exclusions, project selection, management of proceeds, baselines, KPI materiality, target ambition, calculation methods, verification, reporting, fallback and consequences of failure. A small coupon step may be economically immaterial; a broad green category may finance activity that would occur anyway. Second-party opinions and assurance support analysis but do not replace investor review or convert the instrument into risk-free finance.

What is transition finance for high-emitting sectors?

Transition finance directs capital to credible change in sectors such as power, steel, cement, transport and buildings that cannot become low-emission immediately. Excluding every high-emitting company can reduce financed-emissions metrics without financing real-economy decarbonisation. Including them without conditions can preserve the status quo. The analytical task is to distinguish a time-bound, science-informed pathway from indefinite reliance on future technology.

A credible case links sector pathways to asset-level retirement or conversion, capex, revenue, policy dependencies, demand, just-transition considerations and governance. It identifies locked-in emissions and avoids counting the same reduction across issuer, project and product claims. Engagement needs escalation—covenant, vote, financing change or exit—if milestones fail. 'Improver' is a strategy that must be evidenced over time, not a softer synonym for any currently high emitter.

Where do data, estimates and assurance fail?

Scope 1 and 2 emissions are not always directly comparable and Scope 3 often depends on estimates, supplier boundaries and sector methods. Financed emissions add attribution and asset-class choices. Scenario analysis combines uncertain climate, policy, technology and macroeconomic assumptions rather than producing a forecast. Firms should preserve source, method, coverage, estimation hierarchy, restatements and uncertainty and stop dashboards from displaying calculated precision as fact.

How should an investor test a green or transition claim?

Start with the claim's object: company, activity, product, portfolio or financing instrument. Identify the applicable rule or voluntary standard and obtain the methodology. Test current performance separately from future ambition. Reconcile targets to base year, boundary, acquisitions, offsets and capex. Compare the transition pathway with financial planning, executive incentives, lobbying, asset lives and capital allocation. Look for adverse impacts and dependencies excluded by a narrow metric.

For a fund, inspect objective, label criteria, 70% allocation, remaining assets, stewardship, KPIs, holdings and escalation. For a bond or loan, inspect contractual terms and reporting. For a bank, distinguish financed portfolio claims from prudential risk management. Then model downside if policy, technology, commodity price or customer demand differs from plan. Sustainability analysis informs valuation and risk; it should not suspend ordinary credit, liquidity, governance or fee analysis.

What operating model turns disclosure into decisions?

Assign accountable owners for company reporting, product SDR, prudential risk, financing frameworks and marketing. Maintain a claim inventory that records audience, scope, evidence, standard, approval and expiry. Use common governed data where definitions match, with explicit transformations where they do not. Change control should trigger when a holding, target, methodology, label, rule or underlying project changes—not only at the annual report date.

The board needs a joined view of financial materiality, customer outcomes, risk appetite and public commitments, while each regulated entity retains its own duties. Scenario and transition outputs should influence credit limits, underwriting, product design, stewardship, capex and contingency plans. Breach management must correct both the decision and the communication. The result is not a perfect green score; it is an auditable chain showing why capital received a particular price, mandate or term.

Frequently Asked Questions

Primary Sources and Further Reading

This guide prioritises regulators, payment-system operators and company filings. Figures are the latest available at the August 2026 review date.

• UK Government — UK SRS S1 and UK SRS S2
• FCA — CP26/5 listed-issuer sustainability disclosures
• FCA — Sustainability reporting requirements and timeline
• FCA — PS23/16 Sustainability Disclosure Requirements and labels
• FCA — How to use sustainability labels
• FCA — Climate change, sustainable finance and anti-greenwashing
• PRA — SS5/25 climate-related risk expectations
• PRA — 2026/27 business plan
• UK Government — Climate-related transition-plan consultation
• HM Treasury — UK Green Taxonomy decision

Insurance can be sold by one brand, priced by another system and carried on a third party’s balance sheet. A digital journey may hide a broker, MGA, insurer, reinsurer, payment provider and claims administrator behind one button. That modularity lets specialists launch quickly, but it also makes responsibility easy to misunderstand when a customer needs a refund, policy change or claim.

This guide extends the Lloyd’s market map into retail, commercial and embedded distribution. It connects the chain to Consumer Duty and redress and to RegTech controls. The focus is not a list of InsurTech brands, but the regulated functions, economics, data and failure dependencies beneath them.

What counts as insurance distribution in the UK?

Insurance distribution is broader than giving a personal recommendation. It can include advising on, proposing or carrying out work preparatory to a contract, concluding it, or assisting in its administration and performance, particularly around a claim. PERG 5 helps firms analyse exclusions and regulated activities; ICOBS applies conduct rules to non-investment insurance from a UK establishment, subject to its scope and modifications.

The perimeter follows what each entity does. A site that only displays neutral information and hands off may differ from one that ranks policies, collects answers, recommends cover or completes a purchase. An API provider can be pure technology for one client and part of regulated arranging for another if its discretion or customer role changes. Firms need an activity-by-activity analysis, contractual allocation and permissions that match production.

Insurer, broker and MGA are different economic roles

The insurer, also called the carrier, effects and carries the contract. It prices and reserves for claims, holds regulatory capital and remains liable under the policy. A broker connects customers or other intermediaries to capacity and may advise, negotiate terms, place the risk and support claims. Depending on the mandate and disclosure, a broker can act for the customer, insurer or in different capacities for different functions.

An MGA is an intermediary with delegated underwriting authority from one or more carriers. The delegation may allow product design, rating, quotation, binding, documentation, premium administration and claims authority within agreed limits. The MGA earns commission, fees or profit-related remuneration but normally does not put its own balance sheet behind the claim. Its commercial asset is specialist underwriting and distribution; its strategic dependency is continuing carrier capacity.

What is a Lloyd’s coverholder and binding authority?

In the Lloyd’s market, a managing agent can authorise an approved coverholder to enter contracts of insurance on behalf of a syndicate under a binding authority. The agreement defines classes, territories, limits, pricing discretion, documentation, premium, claims, reporting and audit. A coverholder can be an MGA or broker, but the Lloyd’s designation and approval framework are not generic synonyms for every delegated-underwriting business.

The coverholder supplies local access or specialist expertise; the managing agent oversees delegation and the syndicate supplies risk capital. Bordereaux transmit policy, premium and claims data back to the market. Weak or late data can impair exposure aggregation, reserving, sanctions screening and reinsurance even when sales appear healthy. Delegated-authority technology therefore has to evidence compliance with the binder, not merely issue policies quickly.

How do comparison sites and embedded insurance distribute cover?

A price-comparison website gathers customer data and presents policies or routes customers to providers. Its ranking, default filters, paid placement and explanation can shape outcomes even if the insurer completes the contract. An embedded model places insurance inside another journey—for example travel, device, vehicle, property or business software—using APIs to quote, bind and service without sending the customer to a standalone broker site.

Embedding reduces friction but can weaken attention. Customers may not recognise that cover is optional, understand exclusions or know which firm handles a claim. The host platform, regulated intermediary, MGA and insurer should define who identifies demands and needs, gives disclosures, obtains consent, handles cancellation and supports vulnerable customers. A seamless front end is not evidence that the product fits the target market or delivers fair value.

Which authorisation route can a distributor use?

A firm carrying on regulated distribution can seek direct FCA authorisation with the relevant permissions, become an appointed representative of an authorised principal, or operate within a narrow statutory exclusion where the facts support it. An introducer appointed representative has a more limited role than a full AR. Direct authorisation provides autonomy but brings capital, governance, reporting, complaints and systems obligations appropriate to the business.

The AR model does not outsource accountability into a network label. The principal must assess the appointment, oversee the representative, ensure activities stay within scope and accept regulatory responsibility. An MGA or embedded platform should test whether the principal has capacity and expertise for its product, data and distribution scale. Acquisition, overseas growth or a new sales channel can move activity outside the original appointment and require permission or contract change.

How do ICOBS and the Consumer Duty shape the journey?

ICOBS contains rules on communications, status and remuneration disclosure, demands and needs, advised sales, product information, cancellation, claims and renewals. The exact requirement varies by customer and contract. Firms must communicate in a way that is fair, clear and not misleading and act honestly, fairly and professionally in the customer’s best interests. Digital brevity does not justify hiding material limits behind inaccessible layers.

For retail-market business, the Consumer Duty adds outcomes for products and services, price and value, consumer understanding and consumer support. It makes journey analytics evidence, not merely growth data. Firms should examine who abandons, buys unsuitable optional cover, fails to renew, cannot cancel or gives up during a claim. Vulnerability, accessibility and channel switching need testing across the distributor, administrator and carrier, not at one interface in isolation.

Who is the product manufacturer under PROD 4?

The insurer is commonly a manufacturer, but an intermediary can become a co-manufacturer where its decision-making role determines essential product features and benefits. PROD 4 requires manufacturers to identify a sufficiently granular target market, design and test the product, select appropriate distribution and assess whether total benefits and costs provide fair value. Written agreements should allocate co-manufacturer responsibilities where more than one firm designs the product.

A distributor that did not manufacture the product must obtain enough information to understand its characteristics, target market and value assessment. It should distribute consistently with that market and pass sales and outcome information back. Product governance is therefore a data loop: policy terms, premium, commission, optional extras, cancellations, claims acceptance, payout, complaints and customer support need a shared identifier across parties.

Distribution-role comparison

One group may occupy several roles, but each product still needs a named risk carrier, distribution permission, underwriting authority and claims owner. The table describes typical structures; the contract and actual activity determine the legal result.

Why did the FCA focus on fair value and information sharing?

The FCA’s TR24/2 thematic review examined 28 manufacturers and 39 distributors across ten general-insurance and pure-protection products. It found many firms could not adequately assess and evidence fair value or good outcomes. Weaknesses included target-market definition, governance, action on poor value and information exchange between insurer and intermediary. A policy can be technically compliant at sale yet fail value testing when claims or commission are considered.

The FCA’s annual general-insurance value-measures data provides indicators such as claims frequency, acceptance rates, average payout, claims complaints and the proportion of premium paid in claims. These are diagnostic signals rather than automatic verdicts: low claim frequency may reflect product need, and reporting quality varies. Manufacturers and distributors must interpret the data against target market, coverage, service and total remuneration and act where outcomes are inconsistent.

How do commission and profit commission change incentives?

A distributor may receive a percentage of premium, a fixed fee, service payments or profit commission linked to underwriting results. The FCA’s 2025 retail-intermediary data reported that commission accounted for 83.1% of non-investment insurance-distribution revenue. Commission can efficiently fund advice, placement and service, but high or layered remuneration can erode value or bias product and provider selection if it is disconnected from customer benefit.

Profit commission aligns the MGA or broker with carrier loss performance, yet it can create pressure on claims or risk selection. Governance should separate claims decisions, define calculation periods and reserving, address later deterioration and show that customer support is not penalised. Total remuneration includes every party and optional add-on, not only the front-end broker rate. Boards should compare that total with services, coverage and claims value by cohort.

How do premiums and claims money move?

An insurance intermediary receiving premium may hold client money under FCA CASS 5 or receive it under risk-transfer terms as the insurer’s agent. Under risk transfer, payment to the intermediary can discharge the customer’s obligation to the insurer; the contract must clearly establish the agency and scope. Client-money trust accounts, reconciliations, segregation and controls differ from insurer-money arrangements, so the ledger must tag legal capacity as well as product.

Claims can be paid by the carrier, a delegated claims administrator, the MGA within authority or another service provider. The policyholder should not have to reverse-engineer that chain. Service design needs a single claim reference, status portability, authority limits, escalation and complaint handoff. Premium finance adds a separate credit contract and potential cancellation path; it must not be presented as though the financing cost were part of the insured risk itself.

What is the InsurTech operating stack?

The stack commonly combines identity and sanctions checks, customer-data capture, rating and underwriting rules, quotation, document generation, payment, policy administration, mid-term adjustments, renewal, claims and regulatory reporting. APIs connect distributors to several carriers, while data warehouses create exposure and outcome views. The hard problem is consistent state: the customer record, bound wording, premium, carrier bordereau, finance ledger and claims system must describe the same contract.

Configuration speed creates control risk. A rating-rule or wording change can affect thousands of policies before a manual review finds it. Firms need versioned rates and documents, effective dates, maker-checker approval, test cohorts, rollback and reconciliation from quote to carrier acceptance. Material outsourced cloud, model, payment and administration providers should sit inside operational-resilience mapping, with impact tolerances and exit data rather than only availability promises.

How should AI be governed in underwriting and claims?

Machine learning can enrich fraud detection, triage documents, estimate damage, select questions and support pricing. Its regulatory relevance depends on the decision and customer effect, not whether it is marketed as AI. Firms should document inputs, lawful data use, validation, drift, bias, override, human competence and the reason a decision remains consistent with underwriting authority, policy wording and customer-outcome duties.

A model can improve average accuracy while harming a small cohort or producing explanations that support staff cannot challenge. Monitor quote availability, price, decline, referral, claim acceptance, settlement time and complaints by meaningful customer groups. Generative outputs should not invent coverage or alter a claim file without traceability. When the carrier, MGA and vendor each own a component, the contract needs access to data, testing evidence and incident cooperation.

Where does capacity risk sit in an MGA model?

An MGA can grow distribution without holding insurer capital, which makes premium and commission scale quickly. The trade-off is dependence on binding authority. A carrier can reduce limits, change appetite or decline renewal after poor results or strategic change. Even if existing policies remain valid, new-business revenue can stop. Diversifying capacity helps only when products, data and operations can genuinely transfer.

A resilient MGA tracks loss ratio and development, exposure concentration, bordereaux timeliness, complaints, wording breaches and authority referrals by carrier. It maintains runoff responsibilities, policy and claims data, customer communications and replacement-capacity plans. Investors should distinguish gross written premium from the MGA’s earned commission revenue and from carrier underwriting profit; the same premium cannot be counted as economics for every layer.

What changed in the insurance rulebook in 2025–26?

FCA PS25/21, published in December 2025, simplified parts of the insurance rulebook, including more flexible product-review timing and treatment for larger commercial customers while maintaining protections where consumers or smaller businesses are involved. Current PROD and ICOBS scope must be read in the updated Handbook; firms should not keep obsolete annual-review language in policy while claiming flexibility without a risk-based review trigger.

In June 2026 the FCA opened CP26/22 on further simplification, with consultation closing in September. Those proposals were not final rules at this guide’s August review date. Insurers and intermediaries should separate implemented Handbook changes from consultation options, assess cross-border and commercial scope carefully and retain Consumer Duty, fair-value and customer-support evidence where applicable. Simplification changes how outcomes are achieved; it does not transfer responsibility to the technology provider.

Frequently Asked Questions

Primary Sources and Further Reading

This guide prioritises regulators, payment-system operators and company filings. Figures are the latest available at the August 2026 review date.

• FCA Handbook — PERG 5 insurance-distribution activities
• FCA Handbook — ICOBS general application
• FCA Handbook — PROD 4.3 distribution of insurance products
• FCA — TR24/2 general-insurance product-governance review
• FCA — General-insurance value measures data 2025
• FCA — Retail intermediary market data 2025
• FCA — Consumer Duty information for firms
• FCA — Simplified insurance rules final announcement
• FCA — CP26/22 further insurance-rule simplification
• Lloyd's — What is a coverholder?
• FCA Handbook — CASS 5 client money for insurance distribution

Every card sale produces one customer experience and several wholesale prices. The receipt may show £100, while the merchant receives less after interchange, network, acquiring and ancillary charges. Those charges respond to card type, channel, geography, authentication, risk, volume and contract. Treating the difference as a single ‘Visa fee’ or ‘processor fee’ prevents meaningful comparison.

This guide follows the economics beneath the UK payments map and complements the case studies on enterprise acquiring and bank-payment alternatives. It separates scheme rules from acquirer service, regulated interchange from unregulated line items, and final PSR remedies from proposals that had not yet taken effect in August 2026.

What does a card acquirer actually provide?

An acquirer enables a merchant to accept card transactions and receives settlement from the scheme on the merchant’s behalf. It contracts with the merchant, submits or sponsors transactions into card networks, funds merchant payouts and manages exposure to refunds, disputes, fraud and failure to deliver. The acquiring legal entity may also provide the gateway and processing stack, or those functions may be supplied by separate technology firms.

The acquirer is not the card scheme. Visa and Mastercard establish network rules, route messages and calculate scheme settlement, while banks and other licensed participants issue cards or acquire merchants. Three-party schemes can combine more roles. A payment facilitator or marketplace may aggregate sub-merchants under a master arrangement, but the risk allocation, onboarding and payout structure still has to connect to an acquiring participant.

How does a sale move from authorisation to settlement?

At authorisation, the merchant sends card and transaction data through a terminal or online gateway to the acquirer or processor. The scheme routes the request to the issuer, which applies funds, fraud and authentication logic and returns an approval or decline. An approval reserves or confirms capacity; it is not final cash settlement and can later be reversed, expire or become disputed.

The merchant captures the transaction and submits it for clearing. Network files identify interchange and other obligations, after which settlement banks move net positions and the acquirer pays the merchant according to its schedule. Refunds and chargebacks travel through related but distinct messages. The period between a merchant receiving proceeds and final exposure ending creates credit and liquidity risk that the acquirer prices, reserves or secures.

What is inside the merchant service charge?

The merchant service charge, sometimes described through a merchant discount rate, is the principal fee for acceptance. Its wholesale base often includes interchange and scheme or processing fees; the acquirer adds margin for technology, operations, funding, compliance, fraud, credit and service. A percentage plus a fixed authorisation or transaction amount means small-ticket economics can differ substantially from the advertised percentage.

Other amounts can sit inside the rate or appear separately: gateway subscriptions, terminal rental, tokenisation, 3-D Secure, network assessments, PCI non-compliance, currency conversion, cross-border uplift, refunds, retrievals and chargebacks. Pricing can also include minimum monthly charges or tiered volume commitments. A merchant should reconcile gross sales to net payout and invoice rather than assume all deductions appear in one contract table.

How does interchange shape issuer and merchant economics?

Interchange is transferred from the acquiring side to the issuer for a card transaction. It helps fund issuance, fraud losses, processing, credit and rewards, but it enters the merchant’s cost through the acquirer. The rate varies by scheme schedule and transaction attributes, including consumer or commercial card, debit or credit, domestic or cross-border status and card-present or card-not-present channel.

The UK Interchange Fee Regulation caps interchange for qualifying domestic consumer four-party transactions at 0.2% for debit and 0.3% for credit. Scope is decisive. Commercial cards, certain three-party arrangements and cross-border corridors can fall outside or receive different treatment. The cap constrains the issuer transfer, not the scheme’s own fees or the acquirer’s all-in charge, so a low interchange line does not prove a competitively priced merchant contract.

What are scheme and processing fees?

Schemes charge for participation, brand and rulebook services, message processing, clearing, settlement and a catalogue of transaction or service attributes. Some charges are core and unavoidable for a given flow; others relate to optional or behavioural services. Fee schedules can combine percentages, fixed amounts, tiers, thresholds and incentives. Acquirers must translate that complexity into merchant pricing while managing later scheme changes.

The PSR’s March 2025 final report found Mastercard and Visa did not face effective competitive constraints in supplying core scheme and processing services to UK acquirers. It found real-terms core fees rose by more than 25% from 2017 to 2023, adding at least £170 million per year, and that unclear or incomplete information raised acquirer and merchant costs. Those findings concern network economics, not proof that every individual charge or merchant price is unlawful.

Where do gateways, processors and payment facilitators fit?

A gateway securely collects payment data and connects the merchant environment to processing. A processor formats, routes and records authorisation or clearing messages. Token providers, fraud engines and orchestration platforms can add services across multiple acquirers. An integrated provider may perform all these roles plus acquiring; another may supply software while a partner institution remains the contractual acquirer and settlement-risk owner.

A payment facilitator simplifies access for smaller sellers by onboarding them as sub-merchants and aggregating flows. That model creates platform-level responsibility for know-your-customer checks, transaction monitoring, reserves, prohibited activity and payout controls under its acquiring contract. Merchants should identify who holds funds, who appears on statements, who can withhold settlement and who receives a dispute. A single dashboard can conceal several legal entities and fee schedules.

Blended, interchange-plus and IC++ pricing compared

Blended pricing offers one or a few headline rates across categories. It is easy to budget but combines wholesale cost and margin, so the acquirer benefits or loses as the merchant’s mix changes. Interchange-plus separates the applicable interchange from an acquirer markup. IC++ goes further by exposing interchange, card-scheme fees and acquirer margin as distinct layers, although hundreds of underlying network lines can still be grouped or allocated.

No model is universally cheapest. A simple retailer can value a stable blended rate; a large or international merchant may need IC++ data to route, forecast and negotiate. Comparison requires a representative transaction file and consistent inclusion of fixed fees, refunds, cross-border and ancillary services. Repricing only the visible markup may have little impact if card mix, scheme assessments, failed authentication or low average ticket drives most of the effective cost.

Merchant card-cost stack

A useful invoice model assigns every amount to an economic owner and controllability category. Some costs are regulated or scheme-set, some are negotiable provider margin, and others can be influenced through routing, authentication, data quality or fraud performance. The table avoids the common error of treating every line as interchange.

What did the card-acquiring market review find?

The PSR’s 2021 final report concluded that acquiring did not work well for small and medium merchants and larger merchants with annual card turnover up to £50 million. Merchants with £15,000 to £50 million of annual card turnover served by the five largest acquirers received little or no pass-through of savings from interchange caps. Many merchants rarely searched, negotiated or switched even where savings were available.

The finding was not that one provider or price should serve every merchant. Search friction, opaque statements, contract complexity and terminal lock-in weakened the competitive process. In response, the PSR directed 14 significant providers through Specific Directions 14, 15 and 16, later updating the directed-entity mechanism. The directions target information and switching conditions rather than setting a universal merchant service charge.

How do the PSR’s acquiring remedies work?

Directed providers must supply a standard summary information box and an online quotation tool so merchants can obtain more comparable information. Trigger messages alert merchants when an initial contract or subsequent period ends and encourage them to shop around. Point-of-sale terminal lease and rental contracts are capped at 18 months, followed by a rolling monthly arrangement, reducing long equipment lock-ins.

The remedies can improve negotiation only if merchants use the information and compare like with like. An online quote based on standard assumptions may differ from realised cost when card mix or services change. The PSR continues to monitor how easy tools are to find, whether quote and actual prices align, whether trigger messages prompt action and whether terminal exit works. Contract renewal should therefore start with actual transaction and invoice data, not the trigger message alone.

What remedies are proposed for scheme and processing fees?

Following its scheme-fee findings, the PSR consulted in 2025 on three remedy areas: better information and transparency, stronger governance around scheme pricing, and regulatory financial reporting. At the August 2026 review date, the PSR said it expected to publish final directions for information/transparency and pricing governance later in 2026, while CP26/1 consulted on a draft financial-reporting direction.

That status matters. The final market-review findings are established, but draft directions should not be described as binding until adopted and commenced. Acquirers still need to manage current scheme schedules, pass-through clauses and merchant communications. Better network data could improve forecasting and challenge, yet a regulatory report by itself does not lower a fee; any commercial or regulatory effect depends on final design and subsequent market behaviour.

Why are UK–EEA online interchange fees a separate issue?

After the UK’s EU exit, Mastercard and Visa increased outbound interchange on EEA-issued consumer cards used for card-not-present purchases at UK merchants. The PSR reported increases from 0.2% to 1.15% for debit and from 0.3% to 1.5% for credit during 2021 and 2022. Its December 2024 final report found the fees unduly high and estimated £150–200 million of additional annual cost to UK businesses.

The regulator initially considered an interim cap followed by a lasting methodology. It later decided not to proceed with the interim cap and instead to develop the robust methodology first. The High Court upheld the PSR’s power to regulate these fees, but that judgment did not itself set a price. As of August 2026, merchants should model the current corridor cost and monitor formal decisions rather than book an assumed cap saving.

How should a merchant evaluate an acquiring proposal?

Build a twelve-month cohort model by scheme, consumer or commercial type, debit or credit, domestic or cross-border status, channel, currency, ticket size and refund rate. Apply each proposal’s percentages, fixed fees, minimums, rentals and ancillary charges to the same file. Divide total cost by settled sales for an effective rate, but retain the pence-per-transaction view because average ticket can make percentage comparisons misleading.

Then score non-price outcomes: authorisation uplift, false declines, fraud and chargeback liability, payout timing, reserves, reconciliation, reporting, support, data portability, outage history and termination. A provider that appears ten basis points cheaper can be more expensive if conversion falls or cash is delayed. Contract controls should specify notice of scheme changes, audit evidence, subprocessor dependency and rights to route or exit.

How do acquirers manage unit economics and failure risk?

An acquirer’s net revenue is the merchant charge less interchange, scheme fees and other pass-through costs. Against that spread sit processing, fraud tools, compliance, sales, support, funding and losses. Large merchants bring volume and thin margins; small merchants can support more margin but require proportionally more onboarding and service. Cross-border and higher-risk verticals can increase both price and reserve or collateral requirements.

The key balance-sheet risk is that the merchant cannot meet refunds or chargebacks after it has already received settlement. Acquirers monitor delivery periods, concentration, dispute rates and financial health, then use delayed settlement, rolling reserves, guarantees or limits. Abrupt holds can damage a healthy merchant, while weak reserves can damage the acquirer. Risk policy therefore has to be explainable, contractually grounded, sensitive to forward obligations and supported by a fair review and escalation process.

Will pay-by-bank or regulatory consolidation remove card costs?

Open-banking payments can offer merchants an account-to-account route with a different cost and risk stack. They do not automatically replicate card reach, consumer protections, recurring credentials, refunds or dispute experience. The commercial opportunity is selective routing: use the method that fits the customer journey and liability rather than assuming one rail replaces every card transaction. The open-banking guide maps that alternative.

Government intends to transfer PSR functions into the FCA through primary legislation. Until commencement and transition are complete, the PSR remains the relevant authority and its directions continue to bind their addressees. An organisational change does not erase the economics or competition issues. Merchants, acquirers and schemes should track final legal instruments, not infer that consultation, a court judgment or a proposed regulator structure has already rewritten invoices.

Frequently Asked Questions

Primary Sources and Further Reading

This guide prioritises regulators, payment-system operators and company filings. Figures are the latest available at the August 2026 review date.

• PSR — Card-acquiring market review final report
• PSR — PS22/2 card-acquiring remedies final decision
• PSR — Card-acquiring remedies monitoring
• PSR — Card scheme and processing fees market review
• PSR — Scheme and processing fees final findings
• PSR — CP25/1 scheme-fee remedies consultation
• PSR — Cross-border interchange-fee market review
• PSR — Decision not to proceed with an interim cross-border cap
• PSR — High Court decision on cross-border fee powers
• UK legislation — Interchange Fee Regulation
• HM Treasury — Streamlined payment-systems regulation response

A payment app can look like a bank account while sitting on a very different legal and balance-sheet structure. A customer may see a sterling balance, card, account number and instant transfer button, yet the provider may be an authorised payment institution or electronic-money institution rather than a deposit-taking bank. That difference determines what the firm may do with the money, how it must protect it and what happens after failure.

This guide connects the UK regulatory map to the payment rails beneath customer products. It focuses on the safeguarding perimeter, CASS 15 controls and the Payment and Electronic Money Institution special administration regime. It does not assume that every balance in a multi-product app has the same issuer, protection or insolvency treatment.

Where do payment institutions and e-money firms fit?

The Payment Services Regulations 2017 cover regulated payment services such as executing transfers, acquiring card transactions and money remittance. An authorised payment institution, or API, can provide the services within its permission; a small payment institution operates under a lighter registration regime and statutory limits. A payment-initiation or account-information provider may never possess the customer’s funds, so its safeguarding analysis differs from a wallet or remittance firm that receives money.

The Electronic Money Regulations 2011 govern electronically stored monetary value represented by a claim on the issuer and issued on receipt of funds for payment transactions. An authorised or small EMI can issue that value and may also provide payment services. E-money must be redeemable at par, but it is not a deposit and the issuer cannot use the permission as a general licence to take deposits or lend safeguarded customer funds for its own account.

Which money falls inside the safeguarding perimeter?

For a payment institution, relevant funds broadly arise when money is received for executing a payment transaction and remains within the safeguarding period. For an EMI, funds received in exchange for issued e-money are protected, with separate treatment for unrelated payment services. The start and end of the obligation depend on the legal flow: who is entitled to the money, whether it has reached the payee or another payment service provider, and whether a fee is due.

A platform therefore cannot classify funds from the product label alone. Card settlement, prefunding, chargebacks, fees, unallocated receipts, merchant reserves and currency conversion can create different positions. CASS 15 requires relevant receipts to be allocated to an individual client promptly and normally by the end of the next business day, while unallocated relevant funds remain recorded as such. A documented funds-flow map should drive the ledger rules.

What does safeguarding protect—and what does it not?

Safeguarding is intended to keep customer money available for customers rather than the firm’s general creditors. Under the segregation method, the institution places the required amount in designated accounts at approved banks or, where permitted, invests it in secure liquid assets held through an appropriate custodian. The firm must maintain arrangements that protect customer rights and prevent relevant funds from being used for its own account.

The mechanism does not eliminate investment, operational, bank, fraud or insolvency risk. A customer can face delay while records are reconciled and claims are verified. A historical shortfall, invalid acknowledgement, misclassified receipt or cost of administering the estate may reduce or delay distributions. The FCA reported that failed payment firms between the first quarter of 2018 and second quarter of 2023 had average shortfalls equal to 65% of customer funds—one reason the detailed 2026 regime was introduced.

How did CASS 15 change the control standard?

CASS 15 is the FCA’s supplementary regime, effective from 7 May 2026. It does not repeal the safeguarding duties in the PSRs and EMRs; it adds prescriptive rules and guidance around them. The chapter covers organisation, allocation, segregation, secure liquid assets, insurance or guarantees, third parties, acknowledgement letters, books and records, reconciliations and notification. CASS 10A adds a payment-firm resolution pack designed for rapid retrieval.

The rules apply to authorised payment institutions that hold relevant funds, authorised and small EMIs and credit unions issuing e-money. Small payment institutions may elect to safeguard and then enter the regime. A firm should not infer that a small-firm label removes every obligation: an SEMI issuing e-money is within scope, while a payment-only SPI’s position turns on its election and statutory status. Permission, activity and actual possession of funds all need to be checked.

Why are daily reconciliations central?

An internal safeguarding reconciliation compares the institution’s calculated safeguarding requirement with the resources designated to meet it. Under the standard method, the requirement aggregates positive individual safeguarding balances and relevant funds not yet allocated. CASS 15 requires the exercise as often as necessary and at least once on each reconciliation day. That frequency turns a periodic finance check into an operating control over live customer money.

External reconciliations compare the firm’s books with bank, custodian or other third-party statements. Differences must be investigated and resolved, and a shortfall generally has to be paid into protection from the firm’s own resources. The hardest cases are timing breaks: weekend flows, unsettled card positions, foreign-currency conversions, rejected transfers and reversals. A dashboard that shows a zero aggregate difference can still hide customer-level misallocation or offset one asset-pool deficit against another.

Segregation, secure assets and guarantees are not interchangeable

Most firms use segregation in an approved bank account, but CASS 15 also governs relevant assets and an insurance or guarantee method. Bank diversification, credit quality, concentration and operational access matter because the firm is placing customer protection with a third party. Account titles should include safeguarding where possible, and the bank must provide the prescribed acknowledgement so its rights of set-off or security do not defeat the arrangement.

A compliant insurance policy or guarantee must respond on the institution’s insolvency, pay promptly into a relevant-funds account and avoid restrictive conditions beyond necessary certification. The FCA requires advance notice of first use and material changes. Firms must decide on continuation at least three months before expiry and prepare a segregation fallback if replacement cover is not in place. An expiring guarantee is therefore a liquidity and resolution event, not simply a procurement renewal.

Safeguarding-method comparison

The selected method changes the evidence, counterparties and failure path, but not the need for accurate customer balances. A firm may protect different pools through different permitted methods only if its books can distinguish them and each method meets the applicable amount and control requirements.

Who owns safeguarding governance, audit and reporting?

CASS 15 requires responsibility for operational compliance and governing-body reporting to sit with one director or senior manager who has sufficient skill and authority. That owner needs independent information from finance, treasury, payments operations, product, compliance and engineering. The board should see shortfalls, aged breaks, bank concentrations, acknowledgement status, unallocated funds, agent exposures and changes in product flows—not a single green status.

The supplementary regime includes safeguarding audits under SUP 3A and monthly REP027 reporting under SUP 16, with specified proportionality for firms below the relevant threshold. An audit opinion does not outsource management’s duty: it tests the control environment and can expose qualification or data limitations. Regulatory returns should reconcile to the same governed ledger and evidence used for daily controls; a separate spreadsheet reporting process creates a second, uncontrolled version of customer money.

How do agents, distributors and outsourcing affect the perimeter?

Payment institutions can provide services through registered agents, and EMIs may distribute or redeem e-money through distributors. The principal institution remains responsible for the regulated activity and for safeguarding relevant funds across the model. A delay or data gap at an agent does not postpone the customer’s economic exposure. Contracts should define receipt, settlement, record delivery, reconciliation, complaints, fraud controls and termination or migration.

Technology and banking providers can also be material outsourcers without becoming the regulated issuer. The firm should know which legal entity operates the ledger, holds each account, submits payment instructions and can freeze or restore service. Concentration in one sponsor bank or cloud platform may link safeguarding, payment execution and business continuity. Outsourcing oversight should therefore test recoverability of records and alternative access, not only uptime against a service level.

What happens in payment-firm special administration?

The Payment and Electronic Money Institution Insolvency Regulations 2021 created a special administration regime for eligible firms. A court-appointed special administrator has payment-specific statutory objectives: return relevant funds as soon as reasonably practicable, engage appropriately with payment systems, the Bank, FCA and Treasury, and either rescue the institution as a going concern or wind it up in the best interests of creditors. The objectives recognise that a payment firm’s failure can disrupt money in transit as well as create creditor claims.

The administrator must identify the asset pool and customer entitlements, deal with shortfalls and costs, communicate claims procedures and decide whether services can continue safely. Customers may need to submit evidence even where the app showed a balance. The regime improves the tools and priorities available; it does not create missing assets. A clean resolution pack, reconciled ledgers, bank acknowledgements, agent records and contact data determine whether return is an orderly distribution or a prolonged forensic exercise.

How is this different from bank failure and FSCS protection?

Eligible deposits at an authorised UK bank, building society or credit union can be protected by the FSCS within the applicable limit and may be transferred or paid out through the bank-resolution framework. Funds held by a payment or e-money institution are not directly protected as deposits by that scheme. Instead, the customer relies on the safeguarded asset pool and the statutory recovery process. The two mechanisms have different triggers, timing and evidence.

A fintech may place safeguarded money with an FSCS member bank, but that does not automatically transform every end-customer balance into a direct protected deposit in the customer’s name. Conversely, an app may distribute a genuine bank savings account alongside e-money. Users and business customers should read the contracting-entity and protection disclosures for each product. The companion bank resolution guide explains the deposit side of that boundary.

What should customers and business buyers verify?

First identify the exact legal entity on the Financial Services Register and confirm whether it is a bank, API, EMI, SPI, SEMI, agent or unregulated technology supplier. Match the service and geography to its permissions. Then ask how funds are safeguarded, where they are held, whether balances are pooled, how often reconciliations run and what the firm says about FSCS coverage. Marketing names and group logos are not legal analysis.

A business relying on the provider for payroll, supplier settlement or marketplace payouts should go further. It needs balance and throughput limits, service continuity, data exports, dual controls, incident communication and a route to another provider. Keep evidence of balances and transactions outside the app. Diversification can reduce operational concentration, but splitting cash between two brands that use the same issuer, safeguarding bank or processor may not create the expected independence.

How should a payment firm engineer for recoverability?

The core design is a traceable event ledger. Every receipt, fee, transfer, reversal, chargeback and redemption should carry a customer, asset-pool and safeguarding status. The calculation engine should reproduce the requirement for any reconciliation date, retain source evidence and prevent unauthorised manual netting. Treasury data and bank statements should enter independently enough to detect, rather than mirror, ledger errors.

Failure testing should assume loss of a banking API, corrupt balances, an agent’s missing file and departure of key staff. The firm should be able to produce its CASS 10A resolution pack, customer claim file, account mandates, acknowledgements, contact tree and recent reconciliations within the required retrieval period. That capability is a product feature: it supports credible customer protection, regulator confidence and an orderly exit even when growth, acquisition or a new payment rail changes the funds flow.

Frequently Asked Questions

Primary Sources and Further Reading

This guide prioritises regulators, payment-system operators and company filings. Figures are the latest available at the August 2026 review date.

• FCA — PS25/12 changes to the safeguarding regime
• FCA Handbook — CASS 15 relevant funds
• FCA — Safeguarding requirements for payment and e-money institutions
• FCA — Payment safeguarding rules announcement
• FCA Handbook — CASS 10A resolution packs
• UK legislation — Payment Services Regulations 2017
• UK legislation — Electronic Money Regulations 2011
• UK legislation — Payment and Electronic Money Institution Insolvency Regulations 2021
• HM Treasury — Modernising Payment Services Regulation
• HM Treasury — Payments Forward Plan