New CASS 15 Safeguarding Rules: What Payment Firms Must Know

If your business operates as a payment institution or electronic money institution, significant regulatory changes are reshaping how you must handle client funds. The Financial Conduct Authority's new CASS 15 rules introduce much stricter safeguarding requirements that could fundamentally change your operations, cash flow, and compliance costs.

These aren't minor tweaks to existing regulations—they represent the most comprehensive overhaul of client money protection in the payments sector for years. Getting this wrong could result in regulatory action, while getting it right will strengthen your business's resilience and customer trust.

Understanding CASS 15: The Basics

CASS stands for "Client Assets Sourcebook"—the FCA's rulebook for how regulated firms must protect client money. The new CASS 15 section specifically targets payment institutions (PIs) and electronic money institutions (EMIs), replacing the previous lighter-touch safeguarding regime.

The core principle remains the same: client money must be kept separate from your business funds and protected if your firm fails. However, CASS 15 dramatically raises the bar on how this protection works in practice. Where firms previously had some flexibility in their safeguarding arrangements, the new rules impose much more prescriptive requirements.

This matters because payment firms handle billions of pounds of client money daily—from funds waiting to be transferred internationally to e-money balances sitting in digital wallets. The regulator wants to ensure this money is bulletproof against firm failures, following several high-profile collapses that left customers out of pocket.

Key Changes You Need to Know

The most significant change is around timing. Under CASS 15, client money must be safeguarded by close of business on the day after it's received—a much tighter timeframe than many firms currently operate. This "T+1" rule means you'll need robust daily procedures to identify, calculate, and segregate client funds.

Safeguarding calculations also become more complex. You'll need to perform daily reconciliations showing exactly how much client money you hold and proving it's properly protected. The rules specify particular methodologies for these calculations, leaving little room for interpretation.

Record-keeping requirements have been significantly strengthened too. You'll need comprehensive audit trails showing client money movements, safeguarding calculations, and evidence of compliance with the rules. The FCA expects these records to be readily available for supervisory review.

Perhaps most importantly, the rules introduce stricter governance requirements. Senior management must actively oversee safeguarding arrangements, with clear accountability for compliance. This isn't something you can delegate entirely to operational staff.

Practical Implementation Steps

Start by conducting a gap analysis of your current safeguarding arrangements against CASS 15 requirements. This should identify where your procedures, systems, and controls need upgrading. Pay particular attention to your ability to meet the T+1 safeguarding deadline consistently.

Review your banking arrangements with safeguarding account providers. You may need new agreements or account structures to comply with the enhanced requirements. Some firms are discovering their current banking setup simply won't work under the new rules.

Invest in your systems and processes for daily client money calculations. Manual spreadsheet-based approaches that might have worked previously are unlikely to meet CASS 15's rigorous standards. You'll probably need automated systems that can handle the daily computation and reconciliation requirements.

Train your staff on the new requirements, particularly those involved in client money handling, treasury operations, and compliance monitoring. The enhanced personal accountability aspects mean senior managers need to understand their specific obligations.

Timeline and Next Steps

The implementation timeline is relatively tight, with most provisions taking effect within the next 12-18 months. However, some aspects may have longer transition periods for firms with complex existing arrangements.

Don't wait until the last minute to start preparing. The operational changes required are substantial, and you'll likely need time to test new procedures, negotiate with banks, and ensure systems work properly under the new regime.

Consider engaging with the FCA early if you foresee implementation challenges. The regulator has shown willingness to discuss practical concerns, but they expect firms to demonstrate they're taking the requirements seriously.

Getting ahead of CASS 15 compliance will position your firm well competitively, as robust client money safeguarding becomes an increasingly important differentiator in the payments market. If you need support navigating these complex new requirements, Alera's regulatory compliance team can help assess your current position and develop an implementation roadmap.