Understanding UK consumer credit regulation

If your business offers credit to consumers in any form, you are almost certainly operating within one of the most heavily regulated areas of UK law. Consumer credit regulation exists to protect borrowers from unfair lending, ensure they receive clear information before committing to credit, and give them meaningful rights when things go wrong.

Understanding the regulatory framework is essential before you offer any credit product, arrange credit for customers, collect debts, or provide hire purchase or Buy Now Pay Later services. Getting it wrong is not merely a compliance failing: operating without FCA authorisation is a criminal offence, and improperly executed credit agreements may be unenforceable.

The three pillars of consumer credit regulation

UK consumer credit regulation rests on three interconnected pillars, each serving a distinct purpose. Understanding how they fit together helps you navigate what can otherwise feel like an impenetrable web of rules.

1. The Consumer Credit Act 1974 (CCA)

The CCA is the foundational statute. Originally enacted to consolidate and modernise consumer credit law, it defines what a regulated credit agreement is, sets out the rights consumers have (including the right of withdrawal, early settlement, and the famous Section 75 connected lender liability), and prescribes the form credit agreements must take. Despite being over 50 years old, the CCA remains the backbone of consumer credit law, though it has been substantially amended, most significantly by the Consumer Credit Act 2006.

The 2006 Act replaced the old 'extortionate credit' test with the broader 'unfair relationships' test (sections 140A to 140C), giving courts wide powers to rewrite credit agreements they consider unfair. It also paved the way for the transfer of regulation from the Office of Fair Trading to the FCA.

2. The Financial Services and Markets Act 2000 (FSMA)

FSMA provides the regulatory architecture. It establishes the FCA as the conduct regulator, gives it powers to authorise firms, set rules, supervise compliance, and take enforcement action. The Regulated Activities Order (RAO) 2001, made under FSMA, defines exactly which consumer credit activities require FCA authorisation.

Since 1 April 2014, consumer credit regulation has sat within the FSMA framework. This was a fundamental shift: before 2014, consumer credit was regulated by the OFT under a licensing regime. The transfer to the FCA brought consumer credit under the same regulatory umbrella as other financial services, with significantly stronger supervisory and enforcement powers.

3. The FCA Consumer Credit sourcebook (CONC)

CONC is the FCA's detailed rulebook for consumer credit firms. It translates the broad statutory framework into specific, actionable rules covering every aspect of the credit lifecycle:

• CONC 2: Credit broking and credit intermediaries
• CONC 3: Financial promotions and advertising
• CONC 4: Pre-contractual requirements
• CONC 5: Responsible lending and affordability
• CONC 6: Post-contract obligations (including persistent debt rules)
• CONC 7: Arrears, default, and debt collection

CONC sits alongside the FCA Principles for Businesses (PRIN), including the Consumer Duty (Principle 12), which requires firms to act to deliver good outcomes for retail customers.

The 2014 transfer: from OFT licensing to FCA authorisation

Before April 2014, anyone wanting to offer consumer credit needed an OFT consumer credit licence. The OFT regime was widely criticised as too weak: it lacked adequate powers to intervene quickly, had limited ability to set binding rules, and struggled to supervise the growing and increasingly complex consumer credit market.

The Financial Services Act 2012 mandated the transfer. The FCA took over with substantially enhanced powers: it can impose unlimited fines, vary or cancel firms' permissions, ban individuals from the industry, require skilled person reviews, and bring criminal prosecutions. The transfer represented a step change in regulatory intensity for consumer credit firms.

Who needs FCA authorisation?

The scope of consumer credit regulation is deliberately broad. It catches not just banks and specialist lenders, but any business that engages in a regulated credit activity.

Activities that require authorisation

FCA authorisation is needed for the following activities when carried out by way of business and involving consumers (not business-to-business only):

• Lending: Personal loans, credit cards, overdrafts, hire purchase, conditional sale
• Credit broking: Introducing consumers to lenders, or assisting them in obtaining credit (this catches many retailers and motor dealers)
• Debt collection: Collecting debts owed under consumer credit agreements
• Debt purchasing: Buying consumer credit debts to collect them
• Consumer hire: Renting goods to consumers for more than three months
• Credit information services: Advising or assisting consumers about their credit files
• Debt counselling and debt adjusting: Advising consumers in financial difficulty
• Buy Now Pay Later (from 15 July 2026): Deferred payment credit at the point of sale

A common trap is credit broking. Many retailers, motor dealers, and online marketplaces inadvertently act as credit brokers by introducing customers to finance providers at the point of sale. If you offer customers the option to pay on credit provided by a third party, you are likely engaged in credit broking and need FCA permissions.

When you may be exempt

Certain activities are exempt from FCA authorisation, though the exemptions are narrower than many businesses assume:

• Interest-free credit with 12 or fewer payments: Offering goods or services on credit where the customer pays no more than the cash price, the credit is repayable in 12 or fewer instalments, and there is no charge for credit
• Business-to-business lending: Lending exclusively to businesses, not consumers
• Credit unions and certain friendly societies: Regulated under separate frameworks
• Incidental introductions: Very limited exemption for truly incidental referrals (not at the point of sale)

If you rely on an exemption, document your reasoning carefully. The FCA takes a purposive approach to interpreting scope: if your activity looks like regulated credit in substance, the exemption is unlikely to protect you.

Types of FCA permission

The FCA offers two levels of authorisation for consumer credit, reflecting the different risk profiles of credit activities.

How this affects your business

Consumer credit regulation is not just a compliance cost. It shapes fundamental business decisions about product design, customer relationships, and commercial strategy.

Product design and pricing

Every credit product you offer must comply with detailed rules on information disclosure, affordability assessment, and fair treatment. The Consumer Duty adds a further layer: you must demonstrate that your products offer fair value to consumers and deliver good outcomes. This means considering not just whether your product is legally compliant, but whether it genuinely serves consumer interests.

Operational requirements

FCA-authorised firms must maintain adequate compliance arrangements, submit regular returns (including annual financial data and complaints data), keep detailed records, and respond to FCA information requests. You will need trained compliance staff, appropriate systems, and a governance structure that enables effective oversight of your credit activities.

Enforcement and consequences

The FCA has significant enforcement powers. In recent years it has imposed multi-million-pound fines on consumer credit firms, required large-scale customer redress programmes, and restricted or cancelled firms' permissions. The Financial Ombudsman Service handles individual consumer complaints and can make binding awards of up to GBP 430,000. The reputational consequences of regulatory action can be as damaging as the financial penalties.

Upcoming changes: BNPL regulation

From 15 July 2026, Buy Now Pay Later (deferred payment credit) providers will need FCA authorisation for the first time. This brings a significant new cohort of firms into the regulatory perimeter and creates credit broking obligations for retailers and online platforms that offer BNPL at checkout. If your business model involves BNPL, preparation should start now.

Where to go from here

This guide provides the strategic context for understanding consumer credit regulation. Your next steps depend on your situation:

• If you need FCA authorisation, see FCA consumer credit authorisation
• If you advertise credit products, see Comply with credit advertising rules
• If you provide credit agreements, see Meet pre-contract disclosure requirements
• If you collect debts, see Comply with debt collection rules
• If you offer BNPL services, see Buy Now Pay Later regulation