If a payments firm is going to fail its supervisor, safeguarding is where it happens. Not capital, not the AML policy, not the licence application itself. Safeguarding, because it is the one obligation that is tested continuously, and the one where the gap between a written policy and an operating reality is easiest for an examiner to find.
It is worth understanding properly before you apply, because a safeguarding arrangement cannot be retrofitted convincingly. It is either built into how the business handles money or it is not.
What the obligation is for
When an EMI or a payment institution fails, customer funds must not be available to its creditors. That is the entire point. Safeguarding exists so that a firm's insolvency is the firm's problem and not its customers'.
Everything about the requirement follows from that objective. If your arrangement would leave a liquidator arguing about whose money is in which account, it does not achieve the objective, however carefully the policy is worded.
The permitted methods
Regulation allows two broad approaches.
The first is segregation. Relevant funds are held in a separate account at a credit institution, or invested in secure, liquid, low-risk assets, kept apart from the firm's own money and identifiable as belonging to customers.
The second is insurance or a comparable guarantee, from an insurer or credit institution outside your own group, payable to customers if the firm cannot meet its obligations.
Segregation is what most firms use, because insurance cover on the required terms is expensive and not always obtainable.
Where firms actually get it wrong
Commingling, even briefly. Customer funds landing in an operating account and being swept to the safeguarding account at the end of the day is a breach for the whole of that day. Supervisors ask exactly when funds enter the safeguarded account, and the answer needs to be immediately on receipt.
Reconciliation that is not daily and not evidenced. You must be able to show, on any given day, that the balance safeguarded matches the aggregate customer liability. Firms that reconcile weekly, or reconcile daily but keep no auditable record, fail this test even when the money is genuinely all there.
Confusing which funds are relevant. Fees you have genuinely earned are yours. Funds received for a payment not yet executed are not. Getting the boundary wrong in your favour is the version supervisors treat most seriously.
A safeguarding account that is not legally protected. An account labelled "client funds" at a bank that has not acknowledged the arrangement, and that retains a right of set-off against your other balances, is not insulated. The acknowledgement letter is not paperwork. It is the mechanism.
No wind-down plan that works. You have to be able to return balances in an orderly way. A plan asserting that funds would be returned to customers, with no operational detail on how, is not a plan.
Why it is harder for an EMI than a payment institution
A payment institution holds funds in transit, usually briefly. An EMI holds a standing float that customers may leave in place indefinitely. The balance is larger, more permanent, and more consequential if it is lost, and supervisory attention scales accordingly.
It also introduces a question payment institutions rarely face: where the float earns yield, who is entitled to it, and whether the assets it sits in are genuinely secure and liquid under stress. Reaching for return on a customer float has ended firms.
What supervisors will ask for
Expect requests for the account structure and bank acknowledgements, daily reconciliation records over a period, the internal methodology defining relevant funds, evidence of who performs and who independently checks the reconciliation, and in many regimes an external auditor's opinion on the adequacy of the arrangement.
The pattern in enforcement is consistent. Firms are rarely penalised for having lost customer money. They are penalised for not being able to prove, on demand, that they had not.
Build it before you need it
Safeguarding is not a compliance document. It is a banking relationship, a ledger design, a daily control, and an audit trail, and each of those takes time to put in place. Firms that treat it as a section of the licence application rather than as the operating spine of the business tend to discover the difference at their first supervisory visit.
BrokLicense builds safeguarding arrangements as part of licensing an EMI or payment institution, and reviews them for firms already authorised. If you are not certain yours would survive an examination, that is worth establishing now.