Defining “acceptable risk” in UK payments regulation

13 March 2025
by Payments Intelligence

LinkedIn
Email
X
WhatsApp

What is this article about?

How the FCA can define and balance “acceptable risk” in UK payments regulation to support innovation while ensuring financial stability and consumer protection.

Why is it important?

A well-calibrated regulatory framework can foster fintech growth, attract investment, and maintain the UK’s global competitiveness without exposing the market to excessive risk.

What’s next?

Industry stakeholders and regulators must collaborate to refine risk-based policies that enable innovation while safeguarding financial integrity.

UK payments firms are grappling with a critical question: What level of risk is acceptable in a market that demands both innovation and resilience? Amid rising fraud, emerging technologies like embedded finance, AI, and stablecoins, and intensifying global competition, the Financial Conduct Authority (FCA) faces mounting pressure to recalibrate its approach to regulation—or risk holding back the very sector it aims to protect.

The stakes are high. Investment in UK fintech has dropped sharply, from over £14 billion in 2022 to just £3.6 billion in 2024, as firms and investors increasingly favour jurisdictions with more agile, innovation-friendly regimes. Payments businesses navigating complex authorisation processes, unclear expectations, and outdated compliance burdens are calling for a shift towards a regulatory framework that reflects today’s market realities, not yesterday’s risks.

Striking the right balance means recognising that risk is inherent to innovation—but so is the danger of stagnation if regulation becomes a brake on progress. The challenge for UK policymakers is to set clear boundaries that protect consumers and markets without choking off growth. Defining “acceptable risk” in payments is no longer an abstract exercise—it’s a make-or-break issue for the UK’s global competitiveness in fintech and financial services.

The growth of the payments market bringing new challenges

The UK payments sector has expanded dramatically in recent years, driven by advances in technology, shifting consumer behaviour, and new forms of digital value exchange. From embedded finance and AI-driven risk tools to stablecoins and alternative payment rails, the pace of change is relentless—but regulation has struggled to keep up.

Many of the current rules were designed for an earlier generation of financial services and do not reflect the complexity or speed of today’s payments ecosystem. Firms are increasingly caught between regulatory requirements that don’t align with modern business models and emerging risks—including fraud, operational failures, and systemic threats—that require sharper regulatory focus.

Getting this balance right is now mission-critical for the UK’s competitive standing. If the regulatory environment becomes too restrictive, innovation will be driven offshore; if too lax, consumer harm and market instability could follow. The FCA’s challenge is to define what constitutes “acceptable risk” in a payments landscape that looks nothing like it did even five years ago—and to do so in a way that encourages growth while protecting consumers and the wider system.

Key areas for regulatory adjustment

Enhancing market competitiveness and innovation

A well-regulated payments landscape supporting innovation is important for the UK’s economic growth. Members of The Payments Association’s regulatory sub-working group have identified areas where greater regulatory flexibility could enhance market competitiveness while maintaining consumer protection and market integrity:

  • Raising the contactless payment limit: As contactless payments dominate consumer transactions, raising the limit could improve efficiency and stimulate activity. Any increase would need to be supported by robust fraud prevention measures, including tokenisation and dynamic authentication.
  • Establishing a structured review process: Many existing regulations pre-date the digital payments era. A formal process for reviewing and updating outdated rules could help reduce unnecessary compliance burdens. The Financial Services and Markets Act 2023 ‘Call for Evidence’ model may offer a useful precedent.
  • Expanding the FCA’s innovation services: The FCA’s Regulatory Sandbox has enabled firms to test new technologies safely. Expanding this to include specialised sandboxes—for stablecoins, AI-driven risk management, or embedded finance—could encourage further innovation. Extending the Early & High Growth Oversight initiative may also provide tailored support for fast-growing payments firms.

Improving the UK’s investment landscape

Investment is the lifeblood of a thriving payments ecosystem. For the UK to maintain its position as a fintech hub, working group members believe it’s important the FCA ensures that regulations do not deter capital inflows or slow down investment cycles.

In 2024, the UK led European fintech investment with $3.6 billion, significantly outpacing France ($1.1 billion) and Germany ($0.92 billion). However, the UK’s fintech investment has seen a sharp decline, dropping from $14.62 billion in 2022 to $3.6 billion in 2024. Some key areas for reform include:

Streamlining regulatory approval processes: Investors and payments firms alike have raised concerns about the slow pace of authorisations, particularly for new market entrants. The introduction of voluntary service level agreements (SLAs) for processing applications (e.g., six months for new firm authorisation, two months for individual approvals) could improve efficiency and investor confidence.

Adjusting control thresholds: Currently, UK regulations require pre-approval for acquisitions of control starting at 10%. Raising this threshold to 20-25% (in line with jurisdictions such as Singapore and Brazil) would facilitate larger, quicker investments in payments firms, fostering greater financial resilience without compromising regulatory oversight.

Aligning investment policies with global standards: The UK must ensure that its regulatory stance remains attractive compared to other jurisdictions. For example, Switzerland and the UAE have taken a more streamlined approach to fintech licensing, which has drawn significant investment. Learning from these models could help the UK remain a competitive destination for fintech funding.

Supporting SMEs and B2B payments

SMEs are the backbone of the UK economy, yet many struggle with compliance burdens that were originally designed for larger financial institutions. A more proportionate regulatory approach could ensure that SMEs, particularly those operating in B2B payments, can thrive without unnecessary regulatory complexity:

  • Implementing a risk-based, tiered approach: Not all payment firms pose the same level of risk. A tiered system that differentiates between micro-enterprises, mid-sized fintechs, and large-scale payments providers could reduce compliance costs for smaller firms while maintaining robust oversight where needed.
  • Reducing regulatory complexity for low-risk micro-enterprises: Many small firms operate with limited transaction volumes and low consumer exposure, yet they are subject to extensive compliance requirements. Exempting these businesses from certain consumer protection rules (where appropriate) could free up resources for innovation and expansion.
  • Encouraging B2B payments innovation: The FCA should explore policies that support digital invoicing, cross-border B2B transactions, and automated payment solutions, ensuring that SMEs have access to efficient financial tools without excessive red tape.

Refining stablecoin and cryptoasset regulation

The role of digital assets in payments is expanding rapidly, with stablecoins and cryptoassets playing an increasing part in emerging payment models. However, the UK risks lagging behind jurisdictions such as the EU and US, where more comprehensive frameworks are taking shape. While financial stability and consumer protection remain priorities, a flexible, risk-based approach may help the UK support innovation while managing risks.

Adopting a risk-based, market-access framework: A tiered model could assess stablecoins based on their use case (e.g., retail vs. wholesale) and systemic importance, offering more proportionate oversight than a one-size-fits-all approach.

Addressing key regulatory considerations

  • Systemic stablecoin classification: Defining thresholds for systemic stablecoins and establishing proportionate oversight.
  • Cross-border interoperability: Enabling UK stablecoins to integrate with international payments frameworks.
  • Consumer protection: Introducing safeguards for redemption and issuer failure, without restricting market development.

A proportionate framework could help balance innovation and risk, supporting the UK’s competitiveness in the evolving payments landscape.

Regulatory efficiency and coordination

Fragmented regulation is seen by some industry participants as a source of uncertainty for payments firms, investors, and consumers. Improving efficiency and coordination between regulatory bodies has been identified by some as a way to address these concerns.

  • Strengthening industry engagement: Some stakeholders have highlighted the potential benefits of more regular engagement with industry through town halls, roundtable discussions, and dedicated fintech liaison officers, to improve transparency and ensure that regulatory developments take account of industry perspectives.
  • Enhancing cross-agency coordination: Greater alignment between the FCA, HM Treasury, and the Bank of England has been suggested as a way to improve consistency across payments, fintech, and digital assets regulation. Suggestions have included establishing a centralised regulatory oversight group to support more streamlined decision-making and reduce potential delays.

Takeaways

To maintain the UK’s position as a leading centre for payments and fintech, stakeholders have identified a need to re-examine how “acceptable risk” is defined within the regulatory framework. Across discussions, several key themes have emerged:

  • The importance of ensuring that regulation supports both innovation and financial stability.
  • Opportunities to enhance competitiveness through targeted adjustments to regulatory processes, including authorisations and control thresholds.
  • The need for proportionate approaches to emerging risks, such as those posed by stablecoins and cryptoassets.
  • Ensuring that regulatory expectations are aligned with the realities of fast-evolving technologies and business models in the payments sector.

Industry collaboration—between regulators, policymakers, and market participants—has been seen as essential to achieving a balanced approach that maintains market integrity while enabling growth and investment.

LinkedIn
Email
X
WhatsApp

Read more Payments Intelligence

Membership

Merchant Community Membership

Are you a member of The Payments Association?

Member benefits include free tickets, discounts to more tickets, elevated brand visibility and more. Sign in to book tickets and find out more.

Welcome

Log in to access complimentary passes or discounts and access exclusive content as part of your membership. An auto-login link will be sent directly to your email.

Continue reading

Exploring how the FCA balances risk in UK payments to promote innovation while protecting financial stability. Join The Payments Association to read the full article.

Become a member to continue reading

Member of The Payments Association? Log in to continue reading

Having trouble signing?

We use an auto-login link to ensure optimum security for your members hub. Simply enter your professional work e-mail address into the input area and you’ll receive a link to directly access your account.

First things first

Have you set up your Member account yet? If not, click here to do so.

Still not receiving your auto-login link?

Instead of using passwords, we e-mail you a link to log in to the site. This allows us to automatically verify you and apply member benefits based on your e-mail domain name.

Please click the button below which relates to the issue you’re having.

I didn't receive an e-mail

Tip: Check your spam

Sometimes our e-mails end up in spam. Make sure to check your spam folder for e-mails from The Payments Association

Tip: Check “other” tabs

Most modern e-mail clients now separate e-mails into different tabs. For example, Outlook has an “Other” tab, and Gmail has tabs for different types of e-mails, such as promotional.

Tip: Click the link within 60 minutes

For security reasons the link will expire after 60 minutes. Try submitting the login form again and wait a few seconds for the e-mail to arrive.

Tip: Only click once

The link will only work one time – once it’s been clicked, the link won’t log you in again. Instead, you’ll need to go back to the login screen and generate a new link.

Tip: Delete old login e-mails

Make sure you’re clicking the link on the most recent e-mail that’s been sent to you. We recommend deleting the e-mail once you’ve clicked the link.

Tip: Check your security policies

Some security systems will automatically click on links in e-mails to check for phishing, malware, viruses and other malicious threats. If these have been clicked, it won’t work when you try to click on the link.

Need to change your e-mail address?

For security reasons, e-mail address changes can only be complete by your Member Engagement Manager. Please contact the team directly for further help.

Still got a question?