Scope and business model
A lead generator collects enquiries for credit providers or intermediaries. Advertising, referral links, detailed application forms and the sale of prospect information are not legally equivalent. Trace who receives consumer information, what the customer was promised and how the generator is paid before classifying a particular journey. Record the legal entity, the actual customer journey and the applicable jurisdiction before drawing a conclusion. Marketing labels cannot override statutory classification, and a platform operating across several countries needs a separately grounded assessment. Distinguish facts established from contractual documentation from assumptions about how a typical transaction works. Consumer-facing explanations should reflect the real product and business relationships at the time of contact.
Regulatory activity and permission
In the UK, article 36A of the Regulated Activities Order may capture certain credit introductions. An introducer appointed representative has a narrower scope than a full-service credit broker. Determine the product, activity, principal relationship and regulatory permissions before assuming a website is only an advertiser. Review the precise regulated activity, agreement type, customer and commercial purpose. The same business can perform different functions across product lines and sales channels. Maintain an activity map showing introductions, application preparation and final contract execution. Record any exemption relied upon and who approved that interpretation. A partner's statement that it is only referring customers cannot replace review of the actual legal requirements.
Advertising and consumer information
Financial promotions must not mislead consumers about lender identity, likelihood of approval or the meaning of the offer. The FCA expects credit brokers to be clear about their status and legal names. Test the advert, landing page and referral destination together because wording may change significantly after a click. Review the full path from advert to payment or application, not merely the formal agreement page. Mobile layouts, promotional banners, prefilled fields and delayed disclosures can change what consumers understand. A legal-name footer cannot repair a prominent misleading promise. Save the screen or message actually seen by the customer and record how representations are corrected when products or partnerships change.
Commission and commercial arrangements
Leads may contain sensitive financial and contact information. Explain who receives information, lawful processing grounds and relevant marketing permissions. A vague reference to selected partners may not adequately inform consumers. Prevent onward transfer beyond what was lawfully authorised, and provide practical routes for correction and marketing suppression. Map every material financial incentive and distinguish payments received by the merchant or intermediary from the lender's charge to the consumer. Evaluate whether recommendations, rankings or sales conversations can be influenced. Explain commercial limits truthfully and check conditional disclosure duties against the actual facts. Keep approved scripts and training alongside supplier contracts, rather than assuming the sales team knows how its commission structure affects consumer protection.
Applications and personal data
Creditors and brokers buying leads should review acquisition practices and customer outcomes. FCA CONC 8.9 has specific requirements for lead generators in certain debt advice and credit-information contexts, not a universal rule for every lending lead. Check supplier claims, permission status, recorded consent and misleading collection tactics. Maintain clear data ownership, security and escalation controls across all participants. A consumer's request to correct an application or object to marketing should reach the entity capable of acting. Agreements should specify responsibility for failed applications, duplicate leads and erroneous balances. Test end-to-end processing rather than relying on a successful API response. Preserve proportionate records while respecting applicable privacy and retention requirements.
Jurisdiction and CCD2 changes
Under Directive (EU) 2023/2225 the revised credit-intermediary definition distinguishes mere introductions from specified intermediary services. National implementation generally applies from 20 November 2026. Current domestic intermediary, advertising and data rules must still be examined by country rather than using the UK definition abroad. Do not describe the revised Directive as a single currently operative rulebook for all Member States. Confirm national implementation, product scope, transition provisions and the regulatory position in the country where the service is offered. A UK credit broking permission does not itself establish authorisation throughout the EU. Assign ownership for legal changes and test the related customer journey before deployment. Document the rule applied and its effective date.
Audit tests and case evidence
Audit a simple affiliate click, application referral, resold contact record and lead sent to another intermediary. Preserve original advertisements, data capture notices, recipient lists and commercial contracts. Test complaints about unexpected calls, duplicate sharing and inaccurate approval claims, and document how problematic suppliers are suspended. Sampling should include ordinary successful sales and problematic exceptions. Check who made each representation, which version of the form or advert was shown, what the consumer authorised and how the account was handled afterward. Record a corrective action owner and retest after remediation. Repeated complaints about unexpected contact, unclear finance identity or inaccurate charges may indicate a process defect rather than an isolated employee error.
Frequently asked questions
Does every merchant financing promotion require identical permissions?
No. Assess actual activities, agreement type, local rules and exemptions.
Are current FCA duties identical to CCD2 national requirements?
No. The UK and each EU Member State have distinct legal frameworks.
Primary sources
FCA credit broker regulatory guide ↗FCA secondary credit broker guidance ↗Directive (EU) 2023/2225 ↗Read the source in its current version. National implementing measures and product-specific applicability may require additional research.