Regulatory Compliance
Home › Services › Regulatory Compliance
Services

Regulatory compliance for payment and e-money firms.

The reporting, policies, governance and conduct standards every regulator requires after authorisation, delivered as a project or on retainer, in more than 60 countries.

Firms we have licensed.

Selected engagements from more than 250 licences obtained since 2013, for payment, e-money and cryptoasset firms.

Since 2013Advising global payment firms
60+Countries licensed in
250+Licences obtained globally
Clients
ClearBankVolkswagenMacmillan Cancer SupportRoyal College of MusicStaysureOval MoneyEMQCentus
nexpayPayment Institution

Obtained Nexpay’s FCA Authorised Payment Institution licence.

dzingElectronic Money Institution

Obtained Dzing Finance’s FCA Authorised Electronic Money Institution licence.

Payment Institution

Obtained Orbital’s FCA Authorised Payment Institution licence.

What we do.

Authorisation is the start of supervision. From the first day of the licence you report to your regulator, maintain the policies you promised in the application, evidence governance and treat customers to the standard the regulator sets. We run that programme for payment institutions, e-money institutions, money services businesses and cryptoasset firms, in the United States, the United Kingdom, every European market, Canada, Australia and Asia.

We write the policies you will follow, build the reporting calendar, prepare and submit the returns, and sit with your board when the regulator asks questions.

Regulatory reporting

Every periodic return the regulator requires, prepared, reconciled to the accounts and submitted on time, with the working papers kept for inspection.

Policies and procedures

A complete, maintained policy set: AML, safeguarding, outsourcing, operational resilience, complaints, conduct, data and business continuity, written for your business.

Governance

Board and committee structure, terms of reference, management information, three lines of defence and the individual accountability regime that applies in each market.

Conduct and customers

Fair treatment of customers, complaints handling, vulnerable customers, product governance and the consumer standards each regulator applies.

Compliance monitoring

A risk-based monitoring plan, executed quarterly, with findings tracked to closure and reported to the board.

Regulatory relationship

Supervisory meetings, information requests and thematic reviews, prepared, briefed and attended.

How we get you there.

  1. ScopeWe review the licence, the permissions, the markets and the products, and set out the obligations that apply and the gaps against them.
  2. BuildPolicies, registers, the reporting calendar and management information are written and approved by the board.
  3. RunReports are prepared and submitted, monitoring is executed, and the compliance function reports to the board every quarter.
  4. ReviewAn annual review tests the whole framework against the regulator’s current expectations and the firm’s growth.

What you receive.

DeliverableWhat it containsWho relies on it
Obligations mapEvery rule that applies to the firm by market, product and permission, with the owner and the evidence requiredBoard, auditors, regulator
Policy setComplete, version-controlled policies and procedures approved by the boardStaff, auditors, banks
Reporting calendar and returnsEvery return with its deadline, preparer, reviewer and submission recordRegulator, board
Quarterly compliance reportMonitoring results, breaches, complaints, regulatory correspondence and actionsBoard, audit committee
Annual framework reviewAssessment of the framework against current regulatory expectations with a prioritised planBoard, regulator

How we work.

  • Senior-ledThe same senior team handles your application from the first call to approval, including every question the regulator raises.
  • Same dayA reply within three business hours and a written proposal the same day: the licence, the requirements, the cost and the timing.
  • ConfidentialYour plans, your application and any listing stay private. Clients are named only with their agreement.
  • Live workspaceDocuments, regulator questions, messages and progress in a shared client workspace, visible to your team at every stage.

Why firms choose BCC.

  • OperatorsWe have run regulated payment businesses, held regulator-approved roles and licensed payment firms in more than 60 countries since 2013.
  • One teamOne in-house team runs the whole programme, from the application to the day you go live.
  • ArrangedBank and safeguarding accounts, card issuing and payment processing, arranged directly through our relationships with banks, card schemes, issuers and processors.

Questions firms ask.

Which regulators does the compliance service cover?

The FCA in the United Kingdom, the national authorities across the EU and EEA, FinCEN and the state regulators in the United States, FINTRAC in Canada, AUSTRAC in Australia, the Monetary Authority of Singapore and the Hong Kong Monetary Authority. The framework is built once and mapped to each market the firm operates in.

Can we retain BCC as our compliance function?

Yes. Many clients retain us to run the compliance function on an ongoing basis, including preparing and submitting returns, running monitoring and reporting to the board. The compliance function reports to your board. Accountability to the regulator stays with your approved people.

How is a retainer priced?

A fixed monthly fee set by licence type, number of markets and reporting load.

Do you provide the MLRO or compliance officer?

We assemble your team, including the MLRO and compliance officer. The approved roles are held by your own people, with interim cover where the regulator permits until the permanent appointment is made.

What happens when the regulator writes to us?

We draft the response, assemble the evidence and brief your board before it is sent.

Speak to an expert.

Tell us what you need and where you operate.