When a supervisor reviews a payment-institution application, the licence is not granted to a document — it is granted to a business. The central question behind every assessment is deceptively simple: can this firm actually do what it says it will do?
Substance is a judgment, not a checklist
It is tempting to treat substance as a box-ticking exercise: a local director here, an office address there. But regulators are assessing whether the people, processes and systems form a coherent, controllable whole — one that can withstand stress and scrutiny.
A licence is granted to a business that can be run, not to a folder that can be filed.
That means the management body must be genuinely engaged, the key-function holders must be qualified and present, and the control framework must be more than policy on paper.
What examiners probe
- Whether decision-making actually happens where the governance chart says it does.
- Whether the compliance and risk functions have authority, resources and independence.
- Whether outsourcing leaves the firm in control — or merely out of sight.
- Whether the evidence trail would survive an unannounced inspection.
A common failure mode is the “borrowed” function: a part-time officer whose name appears on three other applications, or a monitoring system bought but never tuned to the firm’s actual risk. Examiners are practised at spotting the gap between the org chart and the operating reality.
Building for the test
The firms that pass are the ones that built for the test from the start: substance designed in, not bolted on. That is slower and more expensive in the short term — and far cheaper than a refused application or a remediation order.
In practice, that means hiring the key-function holders before you need to name them, documenting decisions as you make them rather than reconstructing them later, and treating the regulatory business plan as an operating manual rather than a sales document. Substance is not a phase of the project. It is the project.