Hiring a CFO for an FCA-regulated firm is not the same as hiring one for an unregulated business. The financial leadership requirements are all still there — but layered on top is a set of regulatory expectations that reshape what ‘a good CFO’ means in this context. This article sets out what boards of regulated firms actually look for, drawing on what we see across the CFO searches FD Capital runs in financial services.

The finance fundamentals still come first

None of what follows displaces the core of the role. A CFO at a regulated firm still has to be an excellent finance leader — command of the numbers, financial control, planning and forecasting, investor and board credibility, and the commercial judgement to help steer the business. A candidate who is regulatory-fluent but weak on the fundamentals is not a serious contender. The regulatory dimension is additive, not a substitute.

Regulatory fluency is non-negotiable

The first thing that sets a regulated-firm CFO apart is genuine regulatory fluency. In many regulated firms the CFO holds SMF2, the Chief Finance function under SM&CR, and is expected to understand the firm’s regulatory obligations as they bear on finance — regulatory capital, liquidity, regulatory reporting, and the control environment the regulator expects. A board is looking for a CFO who does not treat regulation as someone else’s department: who can sit in front of the regulator, own the firm’s financial regulatory position, and speak to it with authority.

SM&CR accountability and fitness

Because the CFO of a regulated firm typically holds a senior management function, the board is hiring someone who will carry personal regulatory accountability. That raises the bar on two fronts. First, fitness and propriety — the candidate must meet the FCA’s fit and proper standard, and the board must be able to satisfy itself and the regulator on honesty, competence and financial soundness. Second, the temperament to hold accountability — a regulated-firm CFO has to be someone who takes ownership of their regulatory responsibilities rather than treating them as a formality. Boards probe for this, because a CFO who does not take SM&CR seriously is a risk to the whole firm.

Capital, liquidity and prudential command

In firms subject to prudential requirements, boards look hard at a CFO’s command of capital and liquidity. The ability to manage the firm’s regulatory capital position, understand the prudential regime that applies, and plan for it is often the sharpest point of differentiation between a general CFO and one who can run finance at a regulated firm. For firms where capital adequacy is a live constraint, this can be the single most important competence a board assesses.

The control environment and the regulator’s expectations

Regulated firms are held to specific expectations on systems and controls, and the CFO owns a large part of that environment — the integrity of financial reporting, the controls around it, and increasingly the governance of new areas such as AI use in finance. Boards look for a CFO who builds and maintains a control environment that meets the regulator’s standard, and who can evidence it. In the AI era, this now extends to how the finance function governs and evidences its use of new tools, a dimension we explore in our guidance on AI and SM&CR for finance leaders.

Cultural and conduct leadership

Finally, boards of regulated firms increasingly look for a CFO who contributes to the firm’s conduct and culture, not just its numbers. Under the Consumer Duty and the wider conduct agenda, the tone set by senior leadership matters, and the CFO is one of the most senior voices in the firm. A board wants a finance leader who reinforces good conduct rather than treating it as a compliance overhead — someone whose commercial judgement is exercised within, not against, the firm’s regulatory obligations.

How boards test for these qualities

Boards and their advisers probe the regulated-firm dimension deliberately in a CFO process. Expect questions that go beyond the finance fundamentals: how the candidate has managed a regulatory capital position under pressure; how they have handled a regulatory information request or a supervisory relationship; how they think about their own SM&CR accountability; how they have built or improved a control environment to a regulator’s satisfaction. A candidate who answers these with concrete experience stands apart from one who treats them as hypothetical. The strongest signal is a candidate who talks about regulatory obligation as part of how they run finance, not as an external constraint imposed on it.

Why genuinely regulated-firm-ready CFOs are scarce

The combined competence set explains why these searches are demanding. The pool of excellent CFOs is large; the pool who also bring genuine regulatory fluency, prudential command, SM&CR readiness and conduct leadership is much smaller. Many strong CFOs have spent their careers in unregulated businesses and, however capable, would step into a regulated firm without the regulatory instincts the role needs. Conversely, some regulatory specialists lack the commercial finance leadership a CFO must have. The candidates who combine both are genuinely scarce, which is why regulated firms often struggle to fill these roles through generalist channels and why the searches reward specialist knowledge of where such people are.

A note on firm type within financial services

Financial services is not monolithic, and what a board prioritises varies with the firm. A CFO for a bank or a prudentially-significant firm needs deep capital and liquidity command; a CFO for a consumer-credit or payments firm needs strong conduct and Consumer Duty instincts; a CFO for an asset manager needs a different regulatory emphasis again. Part of running one of these searches well is understanding which parts of the combined competence set matter most for the specific firm — and assessing candidates against the right weighting rather than a generic regulated-CFO template.

The finance function a regulated-firm CFO has to build

Beyond the CFO’s own competences, boards increasingly assess what kind of finance function a candidate will build. A regulated firm needs a finance function that can produce accurate regulatory reporting on time, maintain the control environment the regulator expects, manage the capital and liquidity position, and — increasingly — govern its own use of new technology including AI. A CFO who can articulate how they would build and lead such a function, not just how they would run the numbers, demonstrates the systemic thinking a regulated firm needs at the top of finance. This is where the modern regulated-firm CFO role has expanded most: it is as much about designing a compliant, well-governed finance operation as about financial leadership in the traditional sense.

The combined standard, in summary

A board hiring a CFO for an FCA-regulated firm is, in effect, looking for a finance leader who would excel in any business and who also brings the regulatory dimension — fluency, SM&CR readiness, prudential command, control ownership and conduct leadership — that a regulated firm demands. Assessed honestly, few candidates clear both bars, which is why these searches reward genuine specialism. A firm that assesses for the full combined standard, and searches where regulated-firm finance leaders actually are, gives itself the best chance of a hire who can hold the role’s dual demands from day one.

What this means for the search

Put together, hiring a CFO for a regulated firm means assessing a wider competence set than an ordinary finance search: the finance fundamentals, plus regulatory fluency, SM&CR fitness, prudential command, control-environment ownership and conduct leadership. It is a more demanding brief, and the pool of candidates who genuinely combine all of it is smaller than the pool of good CFOs generally. That is precisely why regulated-firm CFO searches benefit from a recruiter who understands both finance leadership and the regulatory context.

FD Capital runs CFO and finance-leadership searches for FCA-regulated firms, assessing candidates against exactly this combined standard. Adrian Lawrence FCA, an ICAEW Fellow, leads these searches personally.

Call 020 3287 9501 or email recruitment@fdcapital.co.uk to discuss a CFO or finance-leadership appointment at an FCA-regulated firm.

FD Capital — Regulated-Firm CFO Recruitment

Fellow of the ICAEW | Placing CFOs who combine finance leadership with regulatory command, into FCA-regulated firms since 2018. We recruit permanent, interim and fractional finance leaders across the UK. 4,600+ network. 160+ placements. Shortlists in 3–7 working days.

This guide is general information for finance leaders and does not constitute legal, regulatory or professional advice. Businesses should take their own advice on their specific circumstances. Regulatory positions described are current as at mid-2026 and are developing; readers should check the FCA’s latest publications.

What the role actually is

At an FCA-regulated firm, the Head of Compliance typically holds SMF16, the Compliance Oversight function — one of the senior management functions under SM&CR. The holder is responsible for the firm’s compliance with the regulatory system: overseeing the compliance framework, engaging with the regulator, advising the business on its obligations, and ensuring the firm meets its conduct requirements. Because it is a senior management function, the holder carries personal accountability — they must take reasonable steps to ensure the area they are responsible for is controlled effectively, and can be held individually responsible where it is not.

This is worth understanding before pursuing the role: it is not simply a senior compliance job, it is a regulated position with individual regulatory liability attached. That is part of what makes it demanding, and part of what makes experienced holders valuable.

The experience that builds toward it

There is no single path, but the route almost always runs through hands-on compliance experience across a range of the areas a firm has to manage. A future Head of Compliance typically builds depth in several of the following before stepping up:

• Regulatory advisory — interpreting FCA rules and advising the business on how to meet them.
• Compliance monitoring — designing and running the checks that assure the firm is meeting its obligations.
• Financial crime — exposure to anti-money-laundering and financial-crime frameworks, often overlapping with the MLRO function.
• Regulatory engagement — direct experience of dealing with the FCA, handling information requests, and managing supervisory relationships.
• Conduct and the Consumer Duty — increasingly central, particularly in retail and consumer-credit firms.

Breadth matters because the Head of Compliance has to hold the whole framework, not a single specialism. Someone who has only ever done monitoring, or only financial crime, usually needs to broaden before they are ready for the top role.

Qualifications and professional standing

Formal qualifications are not a strict legal requirement for SMF16, but they help both in building capability and in demonstrating fitness. Compliance-specific qualifications — such as those offered by professional bodies in the field — are common and valued. A background in law, accountancy or a related discipline can be an asset, and some Heads of Compliance come from a chartered-accountancy or audit background where the ICAEW qualification provides a strong foundation in controls and governance. What matters most, though, is demonstrable competence and integrity: under SM&CR the firm must satisfy itself, and the regulator, that the holder is fit and proper for the role.

The fit and proper test

Anyone stepping into SMF16 must meet the FCA’s fit and proper standard, assessed across honesty and integrity, competence and capability, and financial soundness. For an aspiring Head of Compliance this means building not just a track record of capability but a clean regulatory and professional history. The firm appointing you is required to assess this, and the FCA can review it — it is a genuine gate, not a formality.

How to position yourself for the step up

For a senior compliance professional aiming at the role, the practical moves are consistent. Broaden across the compliance framework rather than deepening endlessly in one specialism. Get exposure to regulatory engagement, because a Head of Compliance has to own the FCA relationship. Understand SM&CR from the inside — ideally holding a certified or senior function that builds toward it. Develop the leadership and board-facing skills the role demands, because much of it is advising and influencing senior decision-makers. And build the professional standing — qualifications, reputation, clean record — that the fit and proper test requires.

It is also worth being realistic about firm type. Stepping into SMF16 at a large, complex firm is a different proposition from doing so at a smaller or newly-authorised one, where the route can be faster but the breadth of personal responsibility greater. Many compliance leaders make the step up at a smaller firm and grow from there.

What the role looks like day to day

It is worth being realistic about what the job involves once you hold it, because the day-to-day shapes whether it suits you. A Head of Compliance spends much of their time advising the business — being the person the commercial teams come to before they do something, and the person who has to say no, or find a compliant way to yes. They own the compliance monitoring programme and the assurance it provides. They manage the relationship with the FCA, including notifications, information requests and any supervisory contact. They keep the firm’s compliance framework current as rules change. And they report to the board and relevant committees on the firm’s regulatory health.

It is a role that blends technical regulatory knowledge with influence and judgement. The best Heads of Compliance are not the ones who know the most rules; they are the ones who can apply them commercially, hold the line where it matters, and be trusted by both the business and the regulator.

Smaller firm or larger firm?

The route to the role differs by firm size, and so does the role itself. At a smaller or newly-authorised firm, the step up can come sooner, and the Head of Compliance often wears several hats — sometimes combining SMF16 with the MLRO function (SMF17) or other responsibilities. The breadth of personal responsibility is greater, but so is the opportunity to hold the whole framework early. At a larger firm, the role is usually reached later, is more specialised, and sits within a bigger compliance function with more support — but carries the complexity that scale brings. Neither is inherently the better route; they suit different people and different stages of a career.

A realistic timeline

There is no fixed timeline, but the step to a first Head of Compliance role typically comes after a number of years building breadth across the compliance framework and demonstrating the judgement the role requires. Candidates who broaden deliberately, seek regulatory-engagement exposure, and build toward SM&CR responsibility tend to get there sooner than those who stay narrow. Working with a recruiter who specialises in regulated appointments can also help — both in identifying the firms where a step up is realistic, and in positioning your experience for the fit and proper assessment the role requires.

How FD Capital helps

FD Capital recruits Heads of Compliance and other SM&CR function holders into FCA-regulated firms, and works with senior compliance professionals aiming at the step up. Because Adrian Lawrence FCA conducts senior interviews personally and the firm specialises in regulated appointments, we can advise both firms hiring for SMF16 and candidates building toward it on what the role genuinely requires. If you are aiming at a Head of Compliance role, or hiring for one, we can help.

Call 020 3287 9501 or email recruitment@fdcapital.co.uk to discuss a Head of Compliance (SMF16) appointment, or your route toward one.

FD Capital — SMF16 and Compliance Leadership Recruitment

Fellow of the ICAEW | Placing Heads of Compliance, MLROs and SM&CR function holders into FCA-regulated firms since 2018. We recruit permanent, interim and fractional finance leaders across the UK. 4,600+ network. 160+ placements. Shortlists in 3–7 working days.

This guide is general information for finance leaders and does not constitute legal, regulatory or professional advice. Businesses should take their own advice on their specific circumstances. Regulatory positions described are current as at mid-2026 and are developing; readers should check the FCA’s latest publications.

How a firm treats customers who fall behind is one of the most closely watched areas of consumer-credit conduct. The rules sit largely in CONC 7 of the FCA Handbook, which governs arrears, default and recovery, and they are reinforced by the Consumer Duty’s consumer-support outcome. This article sets out what CONC requires of firms collecting debt, and what a compliance function has to have in place to evidence fair treatment.

The governing principle: forbearance and due consideration

The organising idea of CONC’s arrears rules is that a customer in financial difficulty is to be treated with forbearance and due consideration, not pressed as if nothing had changed. In practice this means a firm must engage with a customer in difficulty to understand their circumstances, consider whether to accept reduced or suspended payments, and avoid action that would worsen the customer’s position without good reason. Firms are expected to have regard to the customer’s situation rather than applying a mechanical collections process regardless of hardship.

This does not mean a firm must forgive debts or abandon recovery. It means recovery must be conducted fairly, proportionately, and with genuine regard to a customer who is struggling — particularly one who is vulnerable.

Vulnerability sits at the centre

Customers in arrears are, by definition, more likely to be in vulnerable circumstances, and the FCA’s expectations on vulnerability apply with particular force in collections. A firm collecting debt must be able to identify signs of vulnerability, respond appropriately, and avoid compounding harm. The Consumer Duty’s consumer-support outcome reinforces this: support must be as accessible in difficulty as it was at the point of sale, and firms cannot make it hard for a struggling customer to get help. A collections operation that is efficient at pursuing payment but poor at recognising and responding to vulnerability is not compliant, however good its recovery rates.

What CONC restricts

CONC contains specific restrictions on collections conduct that a compliance function must operationalise. Firms must not pursue customers in a way that amounts to harassment or undue pressure. Communications must be clear, not misleading, and not designed to alarm. Charges applied to accounts in default must be fair and not used to profit from a customer’s difficulty. And where a debt is passed to a third-party collector or sold, the firm retains responsibility for ensuring the customer continues to be treated fairly — outsourcing collection does not outsource the conduct obligation.

Third-party collectors and the responsibility that does not transfer

This last point deserves emphasis, because it is a common source of exposure. When a firm engages a debt-collection agency or sells a portfolio, it does not shed its regulatory responsibility for how customers are treated. The firm must satisfy itself that any third party acting on its behalf, or any purchaser of its debt where relevant, meets the same standards of fair treatment the firm itself is held to. For a compliance function, that means due diligence on collectors, contractual standards, and ongoing oversight — the same operational-resilience and outsourcing discipline that applies elsewhere, brought to bear on collections.

What compliance has to evidence

As across CONC and the Consumer Duty, the burden is on the firm to demonstrate fair treatment, not merely to assert it. A collections compliance function should be able to evidence that customers in difficulty were engaged with and offered appropriate forbearance; that vulnerability was identified and responded to; that communications and charges met the standards; and that third-party collectors were overseen. This requires monitoring, quality assurance on collections interactions, and management information that shows outcomes for customers in arrears — not just recovery performance.

Information, engagement and the arrears process

CONC sets specific expectations around the arrears process itself. When a customer falls into arrears or default, firms are expected to provide clear information about the position, the sums owed and the options available, and to give the customer a genuine opportunity to engage before escalating. Firms should signpost sources of free, independent debt advice, and should allow a customer who is engaging in good faith reasonable time and space rather than escalating mechanically. The tone and content of arrears communications matter: they must inform and support, not pressure or alarm.

A collections operation that moves a customer through a rigid escalation sequence regardless of engagement or circumstance is precisely what the forbearance principle is designed to prevent. The process must be able to flex for the individual.

The management information a collections function needs

Evidencing fair treatment in collections requires the right management information, and it looks different from pure recovery reporting. A compliance function should be able to see and evidence the proportion of customers in difficulty who were offered forbearance and what kind; how vulnerable customers were identified and what happened to them; complaint volumes and themes arising from collections; the performance and conduct of any third-party collectors; and outcome patterns that might reveal unfair treatment of particular groups. Recovery rate alone tells the board nothing about whether customers were treated fairly — and under the Consumer Duty, fair treatment is the thing that has to be evidenced.

The wider consequences of getting collections wrong

Collections is an area where compliance failings translate quickly into redress and regulatory action. Unfair treatment of customers in arrears — excessive pressure, poor handling of vulnerability, unfair charges, or unmonitored third-party collectors — generates complaints, and complaints in this area frequently reach the Financial Ombudsman Service, whose decisions can require redress across affected customers. Systemic failings can lead to FCA intervention, past-business reviews and remediation programmes that dwarf any short-term recovery gains. The commercial logic is clear once the full cost is counted: fair, compliant collections is cheaper than the alternative.

This is also an area of persistent regulatory focus. The treatment of borrowers in financial difficulty has been a recurring supervisory priority, and the cost-of-living pressures of recent years have kept it there. A firm’s collections conduct is one of the things the regulator is most likely to examine, which raises the premium on getting it right and being able to evidence it.

Building a compliant collections capability

Bringing this together, a compliant collections operation rests on a few foundations: a genuine forbearance framework that flexes to the individual; robust vulnerability identification and response; clear, fair communications and charges; disciplined oversight of any third-party collectors; and management information that evidences fair outcomes, not just recovery. Building and sustaining that is senior compliance work, and it sits at the point where the firm’s conduct obligations are most visible and most tested.

Why this needs senior compliance ownership

Collections is an area where commercial pressure and conduct obligation pull hardest against each other, and where the regulator’s attention is most consistent. It needs a compliance leader who can hold the fair-treatment line against recovery targets, build the monitoring that evidences it, and oversee the third parties involved. This is senior, judgement-intensive compliance work, and getting it wrong — through unfair pressure, poor vulnerability handling, or unmonitored collectors — is a direct route to redress and enforcement.

FD Capital recruits the compliance leaders who own arrears and collections conduct — heads of compliance and MLROs who can build fair-treatment frameworks that satisfy the regulator and withstand scrutiny.

Call 020 3287 9501 or email recruitment@fdcapital.co.uk to discuss a compliance leadership appointment covering collections, arrears and conduct at a regulated lender.

FD Capital — Regulated-Firm Compliance Recruitment

Fellow of the ICAEW | Placing compliance leaders who own conduct, collections and fair-treatment frameworks, into regulated firms since 2018. We recruit permanent, interim and fractional finance leaders across the UK. 4,600+ network. 160+ placements. Shortlists in 3–7 working days.

This guide is general information for finance leaders and does not constitute legal, regulatory or professional advice. Businesses should take their own advice on their specific circumstances. Regulatory positions described are current as at mid-2026 and are developing; readers should check the FCA’s latest publications.

Consumer-credit firms have lived with the Consumer Credit sourcebook (CONC) for years. Since it came fully into force, they have also had to meet the Consumer Duty. The two are not alternatives, and they are not duplicates. This article sets out how they interact — where they overlap, where the Duty raises the bar above CONC’s detailed rules, and what that means for a compliance function that has to satisfy both at once.

Two different kinds of regulation

The starting point is that CONC and the Consumer Duty are different in nature. CONC is a detailed, rules-and-guidance sourcebook: it tells firms specific things they must do, from financial-promotion standards to creditworthiness assessment to arrears handling. The Consumer Duty is an outcomes-based framework: it requires firms to act to deliver good outcomes for retail customers, framed around four outcomes — products and services, price and value, consumer understanding, and consumer support — underpinned by a cross-cutting obligation to act in good faith, avoid foreseeable harm, and enable customers to pursue their financial objectives.

A firm can comply with the letter of a CONC rule and still fall short of the Duty if the outcome for the customer is poor. That is the essential shift: CONC asks ‘did you follow the rule?’; the Duty asks ‘did the customer get a good outcome?’ A compliance function now has to answer both.

Where they overlap and reinforce

In many areas the two point the same way, and the Duty amplifies obligations CONC already contained. Affordability is the clearest example. CONC 5.2A already requires a creditworthiness assessment that considers the customer’s ability to repay sustainably; the Consumer Duty’s avoid-foreseeable-harm obligation reinforces it, because lending that a customer cannot sustainably afford is a foreseeable harm. A firm doing affordability well under CONC is already most of the way to meeting the Duty on that point — but the Duty asks it to look beyond the assessment to the actual outcome.

The same is true of consumer understanding. CONC has long contained detailed rules on financial promotions and adequate pre-contract explanations; the Duty’s consumer-understanding outcome pushes firms to test whether customers actually understood, not merely whether the prescribed information was provided.

Where the Duty raises the bar above CONC

The more demanding areas are where the Duty asks for something CONC’s rules do not spell out. Price and value is the standout. CONC regulates certain charges and requires specific disclosures, but it does not, in general, require a firm to satisfy itself that a product offers fair value. The Duty does. A consumer-credit product that complies with every applicable CONC rule can still fail the price-and-value outcome if the total cost is not reasonable relative to the benefit the customer receives. For high-cost credit in particular, this is a genuine step up.

The monitoring expectation is also higher. The Duty requires firms to monitor and evidence the outcomes their customers actually receive, and to act where those outcomes are poor. This is a data and governance obligation that goes beyond CONC’s transaction-level record-keeping — the firm has to be able to show, at portfolio level, that its customers are getting good outcomes.

The burden of proof has moved

A theme runs through the interaction: under the Duty, the burden of proof sits with the firm. It is not enough to have followed CONC and to assert that outcomes are fine; the firm must be able to demonstrate good outcomes with evidence. For a compliance function this changes the job. Compliance monitoring can no longer be purely rule-based — checking that CONC procedures were followed — it has to become outcomes-based as well, evidencing that those procedures actually produced fair results for customers.

A practical map of where the two regimes meet

It helps to see the interaction area by area. Across the main touchpoints of a consumer-credit relationship, CONC supplies the detailed rule and the Consumer Duty supplies the outcome test:

• Affordability. CONC 5.2A requires a reasonable creditworthiness assessment; the Duty asks whether the lending actually avoided foreseeable harm to the customer.
• Promotions and pre-contract information. CONC prescribes what must be disclosed and how; the Duty asks whether the customer genuinely understood.
• Pricing and charges. CONC regulates specific charges; the Duty asks whether the product offers fair value overall.
• Arrears and collections. CONC 7 requires forbearance and fair treatment; the Duty’s consumer-support outcome asks whether support was genuinely accessible when the customer needed it.

Reading the two together like this is the practical skill a consumer-credit compliance function now needs. Neither regime is sufficient alone: CONC without the Duty risks technically-compliant poor outcomes; the Duty without CONC lacks the detailed standards that make it operable.

Governance: who owns the two regimes together

A recurring question in consumer-credit firms is where accountability for holding CONC and the Duty together actually sits. The Consumer Duty is typically owned at board level, often with a designated non-executive Consumer Duty champion, while day-to-day compliance with CONC runs through the compliance function under the Head of Compliance. The two must connect: the board needs assurance not just that CONC rules are followed but that customer outcomes are good, and the compliance function has to supply the evidence that lets the board give that assurance.

This is why the interaction is a leadership question, not merely a technical one. Someone has to own the whole picture — translating detailed CONC compliance into board-level outcomes assurance, and translating the board’s outcomes expectations back into operational compliance monitoring. In most firms that translation is the Head of Compliance’s job, working with the board and the Duty champion. It calls for a compliance leader who is fluent in both the rulebook and the outcomes framework, and comfortable operating at board level.

The direction of travel

Both regimes continue to develop. The FCA has signalled ongoing review of the CONC creditworthiness rules, and the Consumer Duty’s expectations are being sharpened through supervisory work and published findings. For a compliance function this means the interaction is not a settled state to be documented once, but a live area to be monitored and revisited. A firm that built its CONC-plus-Duty framework at the Duty’s introduction and has not revisited it since is likely already behind. Keeping the two aligned as both evolve is part of the ongoing job of consumer-credit compliance leadership.

What outcomes-based monitoring looks like in practice

The hardest part of holding both regimes is building monitoring that evidences outcomes rather than only process. In practice this means management information that shows, at portfolio level, how customers are actually faring — arrears trajectories, complaint patterns, the experience of vulnerable customers, and whether particular products or segments produce worse outcomes than others. A compliance function that can only report ‘we followed the CONC process’ is no longer enough; the board and the regulator want to see that the process produced fair results, and to see the firm act where it did not.

What this means for the compliance function

Practically, a consumer-credit compliance function now has to operate on two levels at once: the detailed, rule-by-rule compliance CONC demands, and the outcomes-based assurance the Duty requires. That calls for compliance leadership that understands both regimes and can build monitoring that satisfies both — a rules-based control framework layered with outcomes testing and management information that evidences customer results. It is a more demanding brief than either regime alone, and it is one of the reasons demand for experienced consumer-credit compliance leaders has risen.

FD Capital places the compliance leaders who can hold both regimes together — heads of compliance and MLROs who can run a CONC-compliant control framework and evidence Consumer Duty outcomes at the same time.

Call 020 3287 9501 or email recruitment@fdcapital.co.uk to discuss a compliance leadership appointment at a consumer-credit or regulated lending firm.

FD Capital — Regulated-Firm Compliance Recruitment

Fellow of the ICAEW | Placing compliance leaders who can hold CONC and the Consumer Duty together, into regulated firms since 2018. We recruit permanent, interim and fractional finance leaders across the UK. 4,600+ network. 160+ placements. Shortlists in 3–7 working days.

This guide is general information for finance leaders and does not constitute legal, regulatory or professional advice. Businesses should take their own advice on their specific circumstances. Regulatory positions described are current as at mid-2026 and are developing; readers should check the FCA’s latest publications.

Few areas of consumer-credit regulation have generated more remediation, complaints and enforcement attention than affordability. The rules sit in CONC 5.2A of the FCA Handbook, and while they are principles-based rather than prescriptive, getting them wrong has forced lenders through costly remediation programmes and, in some cases, out of the market entirely. This article sets out what a creditworthiness assessment actually requires in practice, and what a compliance function needs to have in place to evidence it.

It is written for compliance leaders, heads of credit risk and finance leaders in FCA-regulated lending firms — and it is particularly timely, because the regulatory perimeter is expanding to bring new lenders into exactly these obligations.

Credit risk and affordability risk are not the same thing

The single most important idea in CONC 5.2A is that creditworthiness has two distinct components, and firms have a natural incentive to attend to only one of them. The first is credit risk — the risk that the customer will not repay, which is a risk to the lender. The second is affordability risk — the risk to the customer of not being able to make repayments in a sustainable manner, without incurring financial difficulties or experiencing significant adverse consequences. Firms have a strong commercial incentive to assess credit risk. They have far less commercial incentive to assess affordability risk, which is precisely why the FCA made it a rule.

A creditworthiness assessment that looks only at whether the firm will get its money back, and not at whether repaying will push the customer into hardship, does not meet the CONC 5.2A standard however sophisticated the credit-scoring behind it.

The proportionality principle

CONC does not prescribe a fixed checklist. Under CONC 5.2A.20R, the extent and scope of the assessment — and the steps needed to make it reasonable — are dependent upon and proportionate to the individual circumstances of the case. The factors that raise the required level of rigour include the cost of the credit, the total amount payable both in absolute terms and relative to the customer’s circumstances, and any indication that the customer’s financial situation means the credit could have a more significant impact on them.

In plain terms: a small, low-cost, short-term advance may reasonably require less information than a large, long-dated or high-cost commitment. The firm must exercise judgement, but it must be able to show the judgement was reasonable in the individual case — proportionality is not a licence to do less, it is an obligation to match the assessment to the risk.

Income, evidence and what you cannot rely on

CONC is clear that firms generally cannot rely solely on a customer’s own statement of income without some independent check — for example, credit-reference-agency data or third-party documentation — where that matters to the assessment. Equally important is a rule firms sometimes miss: under CONC 5.2A.14R, when considering affordability risk, a firm must not take into account any security, guarantee or indemnity. The question is whether the borrower can afford to repay from their own means, not whether the lender could recover from a guarantor or asset if they cannot. Guarantor lending has drawn particular regulatory concern on exactly this point.

Policies, procedures and the audit trail

CONC 5.2A does not stop at the individual assessment; it imposes firm-level governance requirements that a compliance function owns directly. Firms must set out, in writing, the principal factors they take into account in creditworthiness assessments. Those policies must (other than for a sole trader) be approved by the firm’s governing body or senior personnel. They must be reviewed periodically to confirm they remain effective, with deficiencies addressed. And firms must maintain a record of each transaction where a regulated agreement is entered into or credit is significantly increased.

That last point — the audit trail — is where firms most often come unstuck. The requirement is easy to state and hard to sustain, particularly for running-account products such as credit cards that may stay open for years across numerous credit-limit increases. A compliance leader should be able to reconstruct, for any given lending decision, what was assessed and why it was reasonable. A firm that reaches a sound decision but cannot evidence how is exposed regardless of the outcome.

Where firms most often fall short

The FCA’s research across the consumer-credit market has found problems at both ends. Some firms under-comply — carrying out insufficient checks, relying too heavily on a customer’s own statement of income, or treating a good credit score as if it answered the affordability question when it does not. Others over-comply, building burdensome procedures that are costly and restrictive without improving outcomes. The regulator’s aim is neither: it wants a reasonable, proportionate assessment matched to the risk of the individual agreement.

For a compliance function, the practical failings to guard against are consistent: conflating credit risk with affordability risk; failing to verify income where verification matters; applying a one-size-fits-all process that is too light for high-risk lending and too heavy for low-risk; and — most commonly of all — being unable to evidence, after the fact, why a given decision was reasonable.

Automated decisioning is allowed — but it must be effective

Nothing in CONC prohibits automated creditworthiness assessment, and most lenders rely on it at scale. What CONC requires is that the firm can be reasonably satisfied the automated process is effective in making a reasonable assessment in each case. That is a meaningful condition: a firm cannot hide behind an algorithm. It must understand how its model reaches decisions, be able to show the model actually assesses affordability rather than only credit risk, and monitor it for drift and bias. Where AI or machine learning is used, this connects to the wider governance and model-risk obligations that now apply to AI in regulated finance — the firm remains accountable for the outcome regardless of how automated the decision.

Why this matters now: the expanding perimeter

These obligations are not static. From 15 July 2026 — Regulation Day — Buy Now Pay Later lending is brought within FCA regulation, and the FCA has confirmed it will apply the CONC 5.2A creditworthiness rules to BNPL lenders, including on low-value agreements. The Financial Ombudsman Service jurisdiction is being extended to BNPL activity. For a swathe of lenders new to regulation, affordability assessment done to the CONC standard — and evidenced — is now a live compliance requirement, and one many will be building from a standing start.

What good looks like

A firm meeting the CONC 5.2A standard in practice has a written, board-approved affordability policy that is genuinely applied rather than filed; a proportionate approach that flexes with the risk of each agreement; independent verification of income where it matters; a clear separation of affordability risk from credit risk in how decisions are made; and an audit trail that lets it evidence any decision after the fact. Building and maintaining that is a senior compliance responsibility, and it is one of the areas where regulated lenders most need experienced compliance leadership.

FD Capital recruits the compliance and credit-risk leaders who own exactly this — heads of compliance, MLROs and risk leaders who can build affordability frameworks that satisfy the regulator and stand up to scrutiny.

Call 020 3287 9501 or email recruitment@fdcapital.co.uk to discuss a compliance, credit-risk or MLRO appointment at an FCA-regulated lender.

FD Capital — Regulated-Firm Compliance Recruitment

Fellow of the ICAEW | Placing compliance, credit-risk and MLRO leaders into FCA-regulated lending and consumer-credit firms since 2018. We recruit permanent, interim and fractional finance leaders across the UK. 4,600+ network. 160+ placements. Shortlists in 3–7 working days.

This guide is general information for finance leaders and does not constitute legal, regulatory or professional advice. Businesses should take their own advice on their specific circumstances. Regulatory positions described are current as at mid-2026 and are developing; readers should check the FCA’s latest publications.

As the FCA’s scrutiny of financial promotions has intensified, the people who manage them have become more important — and more sought after. Financial promotions compliance has evolved from a sign-off task tacked onto a broader compliance role into a specialism in its own right, requiring a distinctive blend of regulatory knowledge, commercial awareness and judgement. This guide describes what the financial promotions compliance role involves, the skills it demands, how it fits within a regulated firm, and the career path it offers. It is written both for professionals considering the specialism and for firms trying to understand what they are recruiting.

What the Role Involves

A financial promotions compliance professional is responsible for ensuring that a firm’s marketing communications meet the FCA’s standard that promotions be fair, clear and not misleading. In practice the role spans reviewing and approving promotions before publication; advising marketing teams on what they can and cannot say; maintaining the firm’s financial promotions policies and procedures; keeping the records that evidence compliance; monitoring published promotions and external channels; and, increasingly, overseeing the promotions of third parties such as appointed representatives and influencers. The role applies the standard explained in our guide on applying the fair, clear and not misleading standard.

The work is a mix of detailed, document-level review and broader advisory and design work. On any given day the professional might assess a specific advertisement against COBS, advise on the wording of a campaign, update a procedure in response to new FCA guidance, and brief a marketing team on the rules for a new product launch.

The Skills That Matter

The role demands a particular combination of capabilities. The first is regulatory knowledge: a genuine command of COBS 4 and the wider financial promotions framework, available through the FCA Handbook, and an understanding of how the FCA interprets and applies it. The second is commercial awareness: an understanding of how marketing works and what the business is trying to achieve, because a compliance professional who only ever says no adds less value than one who can find the compliant route to the commercial goal.

The third is judgement. Much of financial promotions compliance is not black and white — it turns on the impression a promotion creates, the prominence of risk relative to reward, the suitability of a channel for a product. Applying the standard consistently to ambiguous material is a skill built through experience. The fourth is communication and influence: the ability to explain decisions to marketing teams and, when necessary, to hold the line under commercial pressure with the confidence and authority to make it stick. The fifth, increasingly, is digital fluency — understanding social media, influencer marketing and digital advertising well enough to assess promotions in those channels, as covered in our guide on social media financial promotions.

Where the Role Sits

Financial promotions compliance usually sits within the broader compliance function, reporting ultimately to the compliance oversight function holder — the SMF16 under the senior managers regime. In smaller firms, financial promotions may be one responsibility among several held by a generalist compliance officer; in larger firms, particularly those with heavy marketing activity, it may be a dedicated team. The accountability for the firm’s financial promotions ultimately rests with senior management, which is why the role connects closely to the senior manager regime and the reasonable steps framework.

The role also works in close partnership with the marketing function, and the quality of that relationship matters. The most effective financial promotions professionals are embedded enough in the marketing process to influence promotions from the draft stage rather than acting only as a final gate — which prevents many of the issues described in our guide on common financial promotions breaches.

The Career Path

The career path typically begins in a broader compliance role — a compliance analyst or officer position where financial promotions is one of several areas of responsibility. From there, professionals can specialise, taking on dedicated financial promotions responsibility and developing deep expertise in the area. Progression leads to senior financial promotions or compliance advisory roles, and ultimately toward compliance leadership — head of compliance or the SMF16 compliance oversight function, where financial promotions is one part of a wider remit.

Because financial promotions expertise is in demand and not abundant, professionals who develop genuine depth in it have strong prospects. The specialism is also portable across sectors — the principles apply whether the firm is an investment manager, a payments firm, a consumer credit lender or a wealth manager — which widens the range of opportunities. For those interested in the regulatory framework that surrounds the role, our guides on the SMF16 compliance oversight function and the wider SMCR provide useful context.

A Day in the Role

The practical texture of the role helps explain the skills it demands. A typical day might open with a queue of promotions awaiting review — an email campaign, a landing page update, a set of social posts, a brochure revision — each to be assessed against the standard and either approved, returned with required changes, or escalated. Mid-morning might bring an advisory conversation with marketing about a planned campaign, where the professional’s value lies in shaping the approach early rather than rejecting it late. The afternoon might involve updating a procedure in response to new FCA guidance, sampling live promotions to confirm they match what was approved, or briefing an appointed representative on the firm’s expectations.

What distinguishes the strong professional across all of this is the ability to move fluently between detail and judgement — to apply a precise rule to a specific phrase one moment, and to weigh the overall impression of a whole campaign the next. The role rewards people who are comfortable holding both registers at once, and who can carry the marketing team with them rather than being seen purely as an obstacle.

Tools and Continuing Development

The role increasingly involves technology — promotions review and logging systems, and a growing range of tools that screen marketing content against regulatory requirements before it reaches human review. A modern financial promotions professional benefits from being comfortable with these tools while understanding their limits: technology can flag obvious issues at scale, but the judgement calls that define the role still require a human. Staying current also means tracking the FCA’s evolving expectations, which shift as new channels, products and risks emerge — the rise of finance influencers and the tightening of high-risk investment rules being recent examples. Professionals who invest in continuing development, whether through formal compliance qualifications or active engagement with FCA publications, build the depth that the senior roles require.

What Firms Should Look For

Firms recruiting for financial promotions compliance should look beyond a checklist of regulatory knowledge. The candidates who succeed combine that knowledge with commercial understanding, sound judgement on ambiguous material, the confidence to challenge, and increasingly digital fluency. Sector familiarity helps, as does experience of the firm’s specific product types and channels. The role is too important — and the exposure from getting promotions wrong too significant — to fill with regulatory knowledge alone.

How FD Capital Helps

FD Capital recruits compliance professionals across the full range of FCA-regulated firms, including the financial promotions specialists who keep firms’ marketing compliant. Every candidate is personally assessed by Adrian Lawrence FCA, whose chartered-accountant background gives FD Capital a depth in regulated-finance assessment that generalist recruiters cannot match.

Related guides: Fair, Clear and Not Misleading | Common Financial Promotions Breaches | Social Media Financial Promotions | AR Financial Promotions | Financial Promotions Record Keeping

A compliant financial promotion that cannot be evidenced is, from a supervisory perspective, almost as exposed as a non-compliant one. The FCA expects firms not only to communicate promotions that are fair, clear and not misleading, but to keep records that demonstrate they did — what was approved, by whom, on what basis, and when. When the regulator asks a firm to account for a promotion, the record is the answer. This guide sets out what the FCA expects of financial promotions record keeping, why it matters as much as the promotion itself, and how to build a record-keeping discipline that stands up to scrutiny.

Why Record Keeping Matters

Financial promotions record keeping serves three purposes. It evidences compliance, giving the firm the means to demonstrate to the FCA that a promotion met the standard and was properly approved. It supports the firm’s own governance, providing the audit trail that lets senior managers satisfy themselves the process is working. And it underpins accountability, because under the senior managers regime an individual is responsible for the firm’s financial promotions, and that person needs records to evidence that they took reasonable steps. The FCA’s record-keeping expectations sit within COBS and the wider Handbook, available through the FCA Handbook.

The connection to senior manager accountability is important. The reasonable steps defence under the senior managers regime depends on being able to show what was done. A compliance oversight function holder asked to account for a promotion that went wrong will rely heavily on the records of how the firm’s process operated.

What the FCA Expects You to Keep

While the precise requirements vary by activity, the FCA’s expectations centre on a firm being able to reconstruct the life of a promotion. In practice, a robust record should capture the promotion itself in its final, published form; the approval — who approved it, when, and confirmation that it met the fair, clear and not misleading standard; the basis for any claims made, particularly performance figures or comparisons, with the supporting evidence; the intended audience and channel; and any subsequent amendments or withdrawals and the reasons for them.

For firms approving the promotions of others — including unauthorised firms under the financial promotion approval regime, or appointed representatives — the records must also evidence the due diligence and ongoing monitoring behind that approval. This connects to the principal-firm responsibilities covered in our guide on AR financial promotions and principal firm liability.

How Long to Keep Records

Retention periods depend on the type of business and the relevant Handbook provisions, with some categories of promotion subject to longer retention than others. As a general discipline, firms should retain financial promotions records for the period required by the applicable rules and, where there is any doubt, err toward longer retention rather than shorter. The cost of keeping a record is trivial against the cost of being unable to produce one when the FCA asks. Firms should confirm the specific retention requirements that apply to their permissions and product types rather than assume a single blanket period.

The Approval Record

The heart of financial promotions record keeping is the approval record — the documented confirmation that a competent person assessed the promotion against the standard and approved it before publication. A strong approval record identifies the individual who approved the promotion, the date, the version approved, and ideally a brief note of the assessment, particularly where a judgement call was involved. This is the document that most directly evidences that the firm’s process worked.

Weak approval records — an undated email, an unclear “looks fine”, no link to the specific version published — are a common finding. They leave the firm unable to demonstrate, after the fact, that the published promotion was the one that was reviewed, or that the reviewer genuinely assessed it against the standard.

Substantiating Claims

Where a promotion makes factual claims — performance figures, comparisons, statistics, statements about features — the firm should keep the evidence that substantiated those claims at the time of approval. If the FCA challenges a claim, the firm needs to show not just that it approved the promotion, but that it had a reasonable basis for the claim when it did so. This is particularly important for performance data, where the source, the period and the methodology should all be recorded.

Common Record-Keeping Failures

The record-keeping failures the FCA most often identifies are practical rather than conceptual. The most common is the missing link between the approval and the published version: a firm can show that it approved a promotion, but not that the version published was the version approved, because intervening edits were not captured. Another is the undated or unattributed approval — a record showing that a promotion was approved, but not by whom or when, which undermines the evidential value entirely. A third is the absent substantiation: a performance claim approved without the supporting data retained, leaving the firm unable to show it had a reasonable basis at the time.

Fragmented records are a fourth recurring problem. Where the promotion, its approval, its evidence and its amendment history live in different systems, inboxes and drives, the firm may technically hold all the information but be unable to assemble the complete picture quickly when the FCA asks. The regulator’s expectation is not just that records exist but that the firm can produce a coherent, complete account of a promotion on request — which is why consolidation into a single workflow matters.

Records and the Approver Regime

Record keeping has taken on additional weight with the introduction of the regulatory gateway for firms approving the financial promotions of unauthorised persons. A firm that approves another party’s promotions must be able to evidence the due diligence behind that approval, its ongoing monitoring, and its basis for being satisfied the promotion meets the standard. The record is the mechanism by which an approver demonstrates it discharged this responsibility, and the expectations here are demanding precisely because the approver is vouching for content it did not originate. Firms operating as approvers should treat their record-keeping discipline as central to the permission rather than incidental to it.

Building the Discipline

Good financial promotions record keeping is systematic, not ad hoc. The strongest firms use a defined workflow — often a dedicated system or log — that captures each promotion, its approval, its supporting evidence and its lifecycle in one place, rather than relying on individuals to retain emails and files. The system should make it straightforward to retrieve the complete record of any promotion on request, which is exactly what an FCA query demands.

As with every aspect of financial promotions, the quality of the record keeping tracks the quality of the people operating it. A compliance function that understands why the records matter — and treats them as integral to the reasonable steps defence rather than as paperwork — will maintain them properly. This is part of the broader skill set covered in our guide on the financial promotions compliance role, and it rests on the same standard explained in our guide on applying the fair, clear and not misleading standard.

How FD Capital Helps

FD Capital recruits the compliance and senior manager talent that FCA-regulated firms rely on to maintain robust financial promotions controls and records. Every candidate is personally assessed by Adrian Lawrence FCA, whose chartered-accountant background gives FD Capital a depth in regulated-finance assessment that generalist recruiters cannot match.

Related guides: Fair, Clear and Not Misleading | Common Financial Promotions Breaches | Social Media Financial Promotions | AR Financial Promotions | The Financial Promotions Compliance Role

The appointed representative model lets an unauthorised firm conduct regulated business under the umbrella of an authorised principal. It is a long-established feature of UK financial services, and it carries a feature that catches some principals out: the principal is fully responsible for the regulated activities of its appointed representatives, including their financial promotions. When an AR issues a promotion that breaches the fair, clear and not misleading standard, it is the principal that answers to the FCA. This guide explains how AR financial promotions liability works, why the FCA has tightened its expectations of principals, and what good oversight looks like.

How the AR Model Works

An appointed representative is a firm or person who carries on regulated activities under the responsibility of an authorised firm, known as the principal. The AR does not hold its own FCA authorisation; instead it operates under a contract with the principal, who accepts regulatory responsibility for the regulated activities the AR carries on within the scope of that appointment. The framework derives from Section 39 of the Financial Services and Markets Act 2000, and the detail of the principal’s obligations sits in the FCA’s Supervision manual and its rules on appointed representatives. The FCA sets out principals’ responsibilities in detail.

The critical consequence for financial promotions is that an AR’s promotions are, in regulatory terms, the principal’s responsibility. If an AR communicates a promotion that is not fair, clear and not misleading, the principal has failed to meet its obligations — even though it may not have written, seen or approved the specific content. This is what makes AR oversight a genuine liability rather than an administrative formality.

Why the FCA Tightened the Regime

The FCA became increasingly concerned that some principals were not adequately overseeing their ARs, with AR-related activity generating disproportionate levels of complaints and harm. In response, the regulator introduced enhanced requirements designed to make principals take their oversight responsibilities more seriously — including more information about ARs, clearer expectations on monitoring, and regular reviews of whether each AR relationship remains appropriate.

The direction of travel is unambiguous: principals are expected to oversee their ARs actively and continuously, not to onboard them and assume compliance. For financial promotions specifically, that means a principal must have visibility of, and control over, the promotions its ARs issue. A principal that cannot see what its ARs are promoting cannot discharge its responsibility for those promotions.

The Financial Promotions Exposure

AR financial promotions create exposure in several specific ways. ARs may promote in channels the principal does not routinely monitor — local advertising, social media, events. They may adapt approved materials in ways that break their compliance. They may operate at a scale or pace that outruns the principal’s review capacity. And because the AR is closer to the customer, the principal may be the last to know when something has gone wrong.

The fair, clear and not misleading standard applies to AR promotions exactly as it applies to the principal’s own. Every issue covered in our guide on common financial promotions breaches — unbalanced risk and reward, past performance without context, audience targeting failures — can arise in an AR’s promotions, and the principal carries the consequence.

What Good AR Oversight Looks Like

Effective oversight of AR financial promotions rests on a few principles. First, approval before publication: the principal should review and approve AR promotions rather than discovering them afterwards. Second, clear contractual terms setting out what ARs may and may not do, and requiring them to submit promotions for approval. Third, ongoing monitoring of what ARs actually promote, including periodic checks of their live materials and channels. Fourth, training so that ARs understand the standard they must meet. And fifth, regular review of each AR relationship to confirm it remains appropriate and within the principal’s capacity to oversee.

The social media dimension deserves particular attention, because ARs promoting on social channels multiply the risks covered in our guide on social media financial promotions. An AR’s social post is a financial promotion the principal is responsible for, with all the standalone-post and sharing risks that implies.

A Practical Oversight Framework

Principals that oversee AR financial promotions well tend to operate a structured lifecycle rather than reacting case by case. At onboarding, the principal assesses whether it has the capacity and expertise to oversee the AR’s intended promotional activity before the appointment is made — an honest capacity check that sometimes results in declining an AR the principal cannot properly supervise. During the relationship, promotions are submitted for approval before publication, logged, and checked against the standard, with the principal retaining the right to require amendment or withdrawal. Periodically, the principal samples the AR’s live promotions across all channels — including those the AR might not routinely submit, such as local advertising or social posts — to confirm what is actually in the market matches what was approved.

The annual review the FCA expects is the backstop: a formal reassessment of whether each AR relationship remains appropriate, whether the AR’s activity has grown beyond what the principal can oversee, and whether any promotions issues have emerged. A principal that completes this review properly is far better placed to evidence that it took its responsibility seriously, which matters both for supervision and for the senior manager accountability that sits behind it.

When Oversight Fails

The consequences of inadequate AR oversight fall on the principal. Where an AR issues non-compliant promotions, it is the principal that faces FCA scrutiny, potential redress to affected consumers, and reputational damage — regardless of whether the principal drafted or saw the promotion. In the most serious cases, failures in AR oversight have led to enforcement action against principals and contributed to firms exiting the principal model altogether because they could not oversee their ARs to the required standard. The lesson firms have drawn is that taking on ARs is taking on real, ongoing responsibility, and the financial promotions those ARs issue are squarely within it.

The Resourcing Question

Overseeing AR financial promotions properly is resource-intensive, and the level of resource has to scale with the number and activity of ARs. A principal with a growing AR network needs a compliance function genuinely capable of reviewing and monitoring AR promotions at the required volume and standard — not a nominal arrangement that exists on paper. This is increasingly a senior compliance responsibility, often sitting close to or within the SMF16 compliance oversight function, and it requires people with the expertise and authority to hold ARs to the standard.

Underpinning all of this is record-keeping: the principal must be able to evidence that it reviewed, approved and monitored AR promotions, which is covered in our guide on financial promotions record keeping.

How FD Capital Helps

FD Capital recruits the compliance and senior manager talent that principal firms rely on to oversee their appointed representatives and the financial promotions those ARs issue. Every candidate is personally assessed by Adrian Lawrence FCA, whose chartered-accountant background gives FD Capital a depth in regulated-finance assessment that generalist recruiters cannot match.

Related guides: Fair, Clear and Not Misleading | Common Financial Promotions Breaches | Social Media Financial Promotions | Financial Promotions Record Keeping | The Financial Promotions Compliance Role

Social media is where the financial promotions regime meets its hardest test. The channels are built for brevity, immediacy and sharing — everything that works against balanced, properly contextualised communication about financial products. The FCA has made clear that channel and format are irrelevant to whether the rules apply: a tweet, a short video, an influencer post and a paid story are all financial promotions if they invite or induce investment activity. This guide sets out what compliance teams need to know to keep social media promotions compliant, the specific risks the medium creates, and the controls that work in practice.

The Rules Apply Regardless of Channel

The starting point is simple and non-negotiable: the fair, clear and not misleading standard in COBS 4.2 applies to social media exactly as it applies to a brochure. The FCA has issued specific guidance on financial promotions on social media, and its position is consistent — it does not want to prevent firms using these channels, but it requires them to meet the same standard. A financial promotion is defined by what it does (inviting or inducing investment activity in the course of business), not by where it appears. The underlying rules sit in the FCA Handbook, and the FCA has published dedicated finalised guidance on applying them to social media.

Risk 1: The Standalone Post Problem

The defining social media risk is that each post can be viewed in isolation. A consumer scrolling a feed sees a single post, not the carefully balanced landing page it links to. If the post itself overstates benefits or omits risk, the fact that a linked page restores the balance does not save it — the FCA’s position is that each communication must be compliant in its own right.

Control: treat every post as a standalone financial promotion. The balancing information, including risk warnings, must be present in the post itself, not deferred to a link. Where a format genuinely cannot carry the necessary balance, that is a signal the channel may be inappropriate for that product rather than a licence to omit.

Risk 2: Sharing Strips Context

Social media is built to be shared, and when a promotion is re-shared, retweeted or screenshotted, the surrounding context — and sometimes the risk warning — can be lost. A promotion that was compliant in its original form can become non-compliant as it travels.

Control: design promotions so the essential balance survives sharing — for example, embedding risk information within an image rather than only in accompanying text that may be dropped. The FCA has specifically suggested using embedded infographics to carry required information for this reason.

Risk 3: Character and Format Limits

Short-form platforms impose hard limits that pressure firms to cut risk information to fit. This is one of the most common ways social promotions breach the standard. The FCA’s view is clear: the constraint does not relax the rule. If the necessary information cannot fit, the firm should not be promoting that product on that channel in that format.

Control: the FCA has confirmed that more complex financial products are generally not suitable for promotion through some social media channels. Match the product to the channel: simpler products with shorter risk profiles may work; complex, higher-risk products often will not.

Risk 4: Identification as a Promotion

Consumers must be able to tell that a financial promotion is a promotion. On social media, where paid content sits alongside organic posts and personal opinion, this is easily lost. The FCA has confirmed that clear labelling, such as the hashtag disclosure for advertising, is an acceptable way to comply with the requirement that promotions for investment products are identifiable as such.

Control: require unambiguous promotion labelling on all paid social content, applied consistently and prominently, including on any content posted by third parties on the firm’s behalf.

Risk 5: Influencers and Third Parties

The rise of finance influencers has created a significant area of risk. When a firm engages an influencer to promote its products, the influencer’s content is a financial promotion, and the firm cannot outsource its compliance obligations. The FCA has taken enforcement action in this area and expects firms to ensure that anyone promoting their products on social media meets the standard.

Control: bring influencer and affiliate content fully within the firm’s financial promotions approval process. Brief third parties on the standard, approve their content before publication, label it clearly, and monitor what they actually post. This overlaps with the appointed representative issues covered in our guide on AR financial promotions and principal firm liability.

Risk 6: Targeting and Audience Control

Social platforms allow precise targeting, but they also allow promotions to spread far beyond the intended audience through sharing and algorithmic amplification. Where a product may only be promoted to certain investor categories, the broad reach of social media is a particular hazard.

Control: use platform targeting tools to restrict reach where a product requires it, and recognise that organic sharing can defeat targeting — another reason higher-risk products may be unsuitable for these channels.

Building Social Media Compliance Capability

Managing social media financial promotions well requires a compliance function that understands the platforms as well as the regulation. This is a relatively new skill set: a financial promotions specialist who can read a draft Instagram story or a finance TikTok and assess it against COBS, brief an influencer, and design controls that survive sharing and re-posting. Firms scaling their digital marketing should ensure their compliance capability scales with it. The general standard is covered in our guide on applying the fair, clear and not misleading standard, and the recurring failure modes in our guide on common financial promotions breaches.

How FD Capital Helps

FD Capital recruits the compliance and senior manager talent that FCA-regulated firms need to manage financial promotions across digital and social channels. Every candidate is personally assessed by Adrian Lawrence FCA, whose chartered-accountant background gives FD Capital a depth in regulated-finance assessment that generalist recruiters cannot match.

Related guides: Fair, Clear and Not Misleading | Common Financial Promotions Breaches | AR Financial Promotions | Financial Promotions Record Keeping | The Financial Promotions Compliance Role

Most financial promotions breaches are not the result of firms setting out to mislead. They are the result of familiar, repeatable mistakes — the risk warning that is technically present but practically invisible, the past-performance figure shown without context, the social media post that loses its balance to fit a character limit. Because these failures recur across firms and sectors, they can be anticipated and designed out. This guide sets out the breaches the FCA most commonly identifies, explains why each one happens, and describes the controls that prevent them. It is written for compliance teams, marketers and the senior managers accountable for getting promotions right.

Why Breaches Happen

Financial promotions breaches cluster around a handful of root causes: commercial pressure to emphasise benefits over risks, a review process that engages too late, reviewers who lack the authority or expertise to challenge, and channels — particularly digital ones — whose constraints work against balanced communication. The FCA’s published interventions show the same failure types recurring, which is encouraging in one sense: a firm that understands the common breaches can build controls specifically targeted at them. The underlying standard is the fair, clear and not misleading rule in COBS 4.2 of the FCA Handbook, and the breaches below are all failures of one or more of its three limbs.

Breach 1: Unbalanced Risk and Reward

The single most common breach is a promotion that presents benefits prominently and risks faintly. The returns are in large, confident type; the risks are smaller, greyer, lower on the page, or in a footnote. Even where all the required information is technically present, the imbalance creates a misleading overall impression.

How to avoid it: require risk and reward to be presented with comparable prominence — similar size, weight and position. A practical control is a balance test at review: if the benefits dominate the visual hierarchy, the promotion fails regardless of whether the risk text exists. Risk warnings should sit alongside the claims they qualify, not be exiled to the end.

Breach 2: Past Performance Without Context

Showing historical returns is permitted, but doing so without balanced context, without the standard warning that past performance is not a reliable indicator of future results, or in a way that implies past returns will continue, is a frequent and well-understood breach. Selectively choosing a favourable period — cherry-picking the best five years and omitting the bad one — compounds the problem.

How to avoid it: mandate the past-performance warning wherever historical figures appear, require representative rather than selective time periods, and prohibit any framing that presents past returns as an expectation. Illustrative projections must be clearly labelled as illustrative and accompanied by their assumptions.

Breach 3: Misuse of “Guaranteed”, “Protected” and “Secure”

Words like guaranteed, protected and secure carry strong reassurance, and the FCA treats them with particular caution. Using them without communicating, clearly and prominently, all the information necessary to make the term genuinely accurate is a breach. A product described as “protected” when protection is partial or conditional misleads by implication.

How to avoid it: maintain a list of high-risk reassurance words that trigger enhanced review. Whenever one appears, the reviewer must confirm that the conditions and limitations are communicated with equal prominence, or the word is removed.

Breach 4: Unclear Identification as a Promotion

A financial promotion must be identifiable as such. Content that reads as editorial, personal opinion or organic social media — particularly where an influencer or third party is involved — but is in fact a paid promotion, breaches the rule. The FCA has confirmed that clear labelling, such as the use of an advertising disclosure, is required so consumers understand what they are looking at.

How to avoid it: require unambiguous promotion labelling on all paid content, including affiliate and influencer arrangements, and ensure any third party promoting the firm’s products understands and applies the same standard. This connects directly to the appointed representative and social media issues covered in our companion guides.

Breach 5: Targeting the Wrong Audience

Some products may only be promoted to certain categories of investor — high-net-worth, sophisticated, or professional. Promoting a restricted or higher-risk product to a retail mass audience, or failing to apply the required customer categorisation and risk warnings, is a serious breach. Digital channels make this worse, because broad targeting can place a promotion in front of audiences it was never meant for.

How to avoid it: match the promotion’s distribution to its permitted audience, apply the correct categorisation gateways, and ensure targeting settings on digital platforms genuinely restrict reach where the product requires it. The FCA’s rules on higher-risk investments set specific requirements here.

Breach 6: Omission of Material Information

A promotion can be misleading by what it leaves out. Fees presented incompletely, conditions not mentioned, limitations glossed over, or the identity of the firm unclear — each omission can lead a consumer to a false view. Because every individual statement may be true, omission breaches are easy to miss in review.

How to avoid it: review for completeness, not just accuracy. Ask what a reasonable consumer would need to know to make an informed decision, and confirm it is all present and prominent. A simple discipline — “what is the worst thing that could happen to someone acting on this, and is it disclosed?” — catches many omission breaches.

Breach 7: Social Media Constraint Failures

Character limits, image-first formats and the viral, shareable nature of social media all work against balanced financial promotions. A standalone post that loses its risk warning, or a promotion shared out of its original context so the balancing information is stripped away, is a recurring breach. The FCA has issued specific guidance on financial promotions on social media.

How to avoid it: treat each social media post as a standalone promotion that must be compliant on its own, not reliant on a linked page for balance. Where a channel cannot carry the necessary information, reconsider whether it is appropriate for that product. Our guide on social media financial promotions covers this in detail.

The Common Thread: People and Process

Every breach above is preventable with two things: a review process that engages early and routes promotions through competent reviewers, and reviewers with the expertise and authority to challenge. Controls and checklists help, but they are operated by people, and the quality of financial promotions compliance ultimately tracks the quality of the compliance professionals applying it. Robust record-keeping — covered in our guide on financial promotions record keeping — provides the evidence that the process worked.

How FD Capital Helps

FD Capital recruits the compliance, financial crime and senior manager talent that FCA-regulated firms rely on to keep their financial promotions compliant. Every candidate is personally assessed by Adrian Lawrence FCA, whose chartered-accountant background gives FD Capital a rigour in regulated-finance assessment that generalist recruiters cannot match.

Related guides: Fair, Clear and Not Misleading | Social Media Financial Promotions | AR Financial Promotions | Financial Promotions Record Keeping | The Financial Promotions Compliance Role