How mortgage and insurance intermediaries get FCA authorised: regulated activities, MCOB and ICOBS permissions, MIPRU capital and PII, and the AR route.

Mortgage brokers and insurance brokers sit in the middle of two of the most heavily supervised retail markets in the UK. Both arrange and advise on products that consumers rarely buy more than a handful of times in their lives, so the Financial Conduct Authority (FCA) sets clear expectations before a firm can trade. If you plan to arrange or advise on mortgages, or to distribute general insurance, you either need your own FCA authorisation or you need to operate under a firm that already holds it.
The rules differ in detail between the two markets. Mortgage intermediation is governed largely by the Mortgages and Home Finance: Conduct of Business sourcebook (MCOB), while insurance distribution is governed by the Insurance: Conduct of Business sourcebook (ICOBS), which implements the retained provisions of the Insurance Distribution Directive (IDD). The prudential floor for both, however, sits in a single place: the Prudential sourcebook for Mortgage and Home Finance Firms, and Insurance Intermediaries (MIPRU).
This guide walks through what mortgage broker authorisation actually requires. It covers the regulated activities you will be carrying on, the permissions to apply for, the MIPRU capital and professional indemnity insurance (PII) figures, the IDD conduct obligations for insurance distributors, and the practical choice between becoming directly authorised or joining a network as an appointed representative.
Authorisation is granted by reference to specific regulated activities, not to a job title. A mortgage broker is not a regulated category in itself. What is regulated is the set of activities you perform. For mortgages, the two core activities are arranging (bringing about) regulated mortgage contracts and advising on regulated mortgage contracts. Entering into, administering, arranging or advising on a regulated mortgage contract are all regulated activities that require FCA authorisation, and MCOB then applies to how you carry them out.
MCOB expresses its application by reference to four types of firm: lenders and providers, administrators, arrangers and advisers. Arrangers and advisers together are referred to as intermediaries, which is where most brokers sit. The FCA groups mortgages, home purchase plans, home reversion plans and regulated sale and rent back agreements under the umbrella term home finance transactions, so a firm advising across these products needs the relevant home finance mediation permissions.
For insurance, the relevant activity is insurance distribution. ICOBS sets the conduct standards for firms carrying on insurance distribution activities in relation to non-investment insurance contracts, and it principally implements the UK's retained version of the Insurance Distribution Directive. In practice the permissions cover dealing as agent, arranging (bringing about) contracts of insurance, assisting in the administration and performance of a contract, and advising on non-investment insurance contracts. Many broking firms hold both mortgage and insurance permissions, because protection and general insurance sit naturally alongside a mortgage sale.
When you apply, you request a defined bundle of permissions that matches your intended business. A firm advising on and arranging mortgages will apply for home finance mediation permissions and be allocated to the FCA fee block A.18, covering home finance providers, advisers and arrangers. A firm distributing general insurance applies for insurance distribution permissions and falls into the retail intermediary fee blocks. The table below sets out the main differences in the framework that applies to each.
It is common for the same firm to hold both sets of permissions. Where a firm carries on both insurance distribution and home finance mediation, the MIPRU requirements are combined rather than chosen between, and the higher of any overlapping figures applies. Getting the permission profile right at application stage matters, because acting outside your permissions is a breach in its own right.
| Feature | Mortgage intermediary | Insurance intermediary |
|---|---|---|
| Core regulated activities | Arranging and advising on regulated mortgage contracts | Insurance distribution: arranging, dealing as agent, advising on non-investment insurance |
| Main conduct sourcebook | MCOB | ICOBS (implements the Insurance Distribution Directive) |
| Prudential sourcebook | MIPRU | MIPRU |
| Fee block | A.18 home finance providers, advisers and arrangers | Retail intermediary fee blocks |
| Status disclosure | MCOB initial disclosure obligations | ICOBS 4.1 status disclosure and representative capacity |
| AR route available | Yes, via a mortgage network principal | Yes, via an insurance principal |
Every authorised intermediary must be able to meet its liabilities as they fall due and must hold capital resources at least equal to the applicable MIPRU requirement at all times. The figure depends on whether you hold client money and on the mix of activities you carry on.
Under MIPRU 4.2.11R, a firm carrying on insurance distribution activity or home finance mediation activity (and not holding client money or other client assets) must hold capital resources of the higher of £5,000 or 2.5% of its annual income. A firm in the same category that does hold client money or client assets must hold the higher of £10,000 or 5% of its annual income. These thresholds scale with the size of the business, so a growing broker should model capital against income well before it becomes binding.
Firms that also administer home finance or lend face higher requirements set elsewhere in MIPRU 4, and where a firm combines several activities MIPRU requires the applicable amounts to be summed. The chart below shows the base capital floors for a pure intermediary.
Minimum capital resources for insurance distribution or home finance mediation firms under MIPRU 4.2.11R, before the income-based percentage applies.
MIPRU 3 requires intermediaries to hold professional indemnity insurance, and the minimum limits differ by activity. For an insurance intermediary, MIPRU 3.2.7R sets a minimum single-claim limit of EUR 1,300,380 and an aggregate limit of the higher of EUR 1,924,560 or an amount equivalent to 10% of annual income, subject to a maximum of £30 million. These euro figures were uprated in 2021 from the previous EUR 1,250,000 single-claim and EUR 1,850,000 aggregate levels, to keep the real value of cover in line with the IDD-revised minimums.
For a firm carrying on home finance mediation activity that is not caught by the Mortgage Credit Directive, MIPRU 3.2.9R sets the limit by reference to a percentage of annual income. Where a mortgage intermediary is an MCD credit intermediary, the minimum limits are EUR 460,000 for a single claim and EUR 750,000 in aggregate per year. A policy denominated in a currency other than euros must be at least equivalent to these figures when it is effected and at each renewal.
The permitted policy excess is capped too. Under MIPRU 3.2.12R, a firm holding client money or client assets must keep its excess to no more than the higher of £5,000 or 3% of annual income; under MIPRU 3.2.11R, a firm not holding client money keeps its excess to the higher of £2,500 or 1.5% of annual income. Cover must run continuously from the date Part 4A permission was granted and must extend to Financial Ombudsman Service awards against the firm.
| Requirement | Insurance intermediary (MIPRU 3.2.7R) | MCD mortgage credit intermediary (MIPRU 3.2.9AR) |
|---|---|---|
| Single claim minimum | EUR 1,300,380 | EUR 460,000 |
| Aggregate minimum | Higher of EUR 1,924,560 or 10% of annual income (max £30m) | EUR 750,000 per year |
| Excess (holds client money) | Higher of £5,000 or 3% of annual income | Higher of £5,000 or 3% of annual income |
| Excess (no client money) | Higher of £2,500 or 1.5% of annual income | Higher of £2,500 or 1.5% of annual income |
If you distribute insurance, ICOBS layers conduct obligations on top of authorisation. Because ICOBS implements the retained provisions of the Insurance Distribution Directive, an insurance intermediary must meet status and disclosure standards that a mortgage-only firm does not. Under ICOBS 4.1, a firm carrying on insurance distribution activities must disclose its identity and address, the type of firm it is, and whether it provides a personal recommendation about the products offered.
An insurance intermediary must go further. It has to disclose that it is included in the Financial Services Register, whether it holds 10% or more of the voting rights in any insurer, whether any insurer holds 10% or more of the intermediary's voting rights, and crucially whether it is acting for the customer or for and on behalf of the insurer. These transparency rules, drawn from IDD articles 18 and 19, are designed so customers understand whose interests the firm is representing.
Alongside status disclosure, IDD-derived rules require demands-and-needs assessments, product information such as insurance product information documents, and product oversight and governance. These are conduct rules rather than authorisation gateways, but the FCA will expect an applicant's business plan and systems to show how they will be met from day one.
There are two routes to trading. You can apply for your own FCA authorisation and become directly authorised, or you can become an appointed representative (AR) of a firm that already holds the relevant permissions, often a mortgage or insurance network. An appointed representative is a person party to a contract with an authorised firm which permits them to carry on certain regulated activities, and who is exempt from the need for their own authorisation under section 39 of the Financial Services and Markets Act 2000.
The defining feature of the AR route is responsibility. The principal firm must accept responsibility for the appointed representative's regulated activities, must itself hold permission for those activities, and must have a written contract that meets the FCA's requirements. In return the network typically provides compliance oversight, systems and access to lenders or insurers. The FCA has repeatedly emphasised that principals must properly oversee their ARs, so this is a supervised relationship rather than a light-touch one.
Direct authorisation gives you full control of your permissions, your proposition and your regulatory reporting, but you carry the whole compliance burden yourself, including MIPRU capital, PII and the Senior Managers and Certification Regime. Many small brokers begin as ARs to reach the market faster and move to direct authorisation as they scale. Whichever route you choose, the underlying regulated activities and consumer protections are the same. If you want help weighing the options, our team can talk it through in a free consultation.
Authorisation is not just about permissions and capital. Once authorised, your firm falls within the Senior Managers and Certification Regime (SM&CR). Most mortgage and insurance intermediaries are classified as Core firms, which means they apply the baseline set of Senior Management Functions, the Certification Regime for staff who could pose significant harm, and the Conduct Rules for individuals.
A firm only moves to the more demanding Enhanced tier if it crosses set thresholds, such as total intermediary regulated business revenue of £35 million or more per annum on a three-year rolling average (a £45 million threshold applies to certain firms based on how they report), or being a mortgage lender or administrator that is not a bank with 10,000 or more regulated mortgages outstanding. Smaller firms, and sole traders in particular, may fall into the reduced Limited Scope tier. Building a clear governance map, with named senior managers and statements of responsibility, is part of a credible authorisation application.
Getting authorised as a mortgage or insurance intermediary is a structured process rather than a mysterious one. The FCA wants to see that you understand exactly which regulated activities you will carry on, that you have applied for the matching permissions, and that you meet the MIPRU capital and professional indemnity insurance floors. Insurance distributors additionally need to evidence the IDD-derived conduct standards in ICOBS, while mortgage firms work to MCOB. Both are anchored to the same threshold conditions and the Consumer Duty.
The single biggest early decision is direct authorisation versus the appointed representative route, and the right answer depends on your scale, your appetite for running compliance in house, and how quickly you need to trade. Whichever path you take, preparing a realistic business plan, robust financials and a clear governance structure is what turns an application into an approval. If you would like a structured plan for your permissions, capital and SM&CR setup, our FCA authorisation service is built for exactly this.
Yes. Arranging or advising on regulated mortgage contracts are regulated activities. You must either hold your own FCA authorisation with home finance mediation permissions, or become an appointed representative of a firm that already holds them.
Under MIPRU 4.2.11R, a firm carrying on insurance distribution or home finance mediation and not holding client money needs the higher of £5,000 or 2.5% of annual income. If it holds client money, the requirement is the higher of £10,000 or 5% of annual income.
MIPRU 3.2.7R sets a single-claim minimum of EUR 1,300,380 and an aggregate minimum of the higher of EUR 1,924,560 or 10% of annual income, capped at £30 million. These figures were uprated from EUR 1,250,000 and EUR 1,850,000 in 2021.
An appointed representative is exempt from holding its own authorisation under section 39 of FSMA and operates under a principal firm that accepts responsibility for its regulated activities. A directly authorised firm holds its own FCA permissions and carries the full compliance burden itself.
ICOBS applies, implementing the retained Insurance Distribution Directive. ICOBS 4.1 requires status disclosure, including whether the firm gives a personal recommendation and whether it acts for the customer or the insurer, along with demands-and-needs assessments and product information.
Yes. Most fall into the Core tier and apply the baseline Senior Management Functions, Certification Regime and Conduct Rules. A firm only becomes Enhanced if it crosses set thresholds, such as £35 million of intermediary regulated business revenue on a three-year rolling average.
Nasara Authorise helps UK firms send and control payments with lower fees, better rates and full visibility.



Practical guides and updates for UK firms, straight to your inbox.