Welcome to the FD Capital podcast, where we explore finance leadership, financial services recruitment, regulatory change and the people who help businesses grow while managing risk effectively. Today, we are looking at an increasingly important area of financial services: payments and e-money compliance recruitment. We will discuss why payment institutions and electronic money institutions need experienced compliance leadership, the challenges facing firms under the FCA's regulatory framework, and how to find the right Head of Compliance, Money Laundering Reporting Officer or Head of Safeguarding. We will also explore the differences between permanent, interim and fractional compliance appointments, and why recruitment decisions made during authorisation or a period of rapid growth can have a lasting impact on a business. If you operate a payment institution, an electronic money institution, a card programme, an open banking business or an embedded payments platform, this episode should be particularly relevant. Why payments compliance has become a board-level priority The payments industry has evolved considerably. New technology, faster transactions, embedded finance and the expansion of digital payment services have created opportunities for innovative businesses. However, these developments have also increased the importance of effective compliance, financial crime prevention and safeguarding. Payment firms must demonstrate that they understand their regulatory obligations and have appropriate people, systems and controls in place. It is not sufficient to have a policy document sitting on a shared drive. Compliance arrangements must work in practice, reflect the firm's business model and remain effective as transaction volumes increase. For founders and boards, this creates a significant leadership challenge. They need compliance professionals who understand the regulatory framework but can also work alongside commercial teams, product developers, operations and finance. The right individual must be able to identify risk, challenge decisions where necessary and help the business develop a proportionate control environment. They must understand that a growing payments business needs commercial momentum, but that growth cannot come at the expense of customer protection, financial crime controls or regulatory obligations. This is one reason experienced payments compliance professionals are so valuable. Finding somebody with the right combination of technical knowledge, practical experience and judgement is not always straightforward. The impact of the strengthened safeguarding regime Safeguarding is a particularly important issue for payment institutions and electronic money institutions. The FCA's strengthened safeguarding regime took effect on 7 May 2026, bringing additional requirements for relevant firms. These include daily safeguarding reconciliations on business days, monthly safeguarding returns, annual safeguarding audits subject to applicable exemptions, and a resolution pack documenting where relevant funds are held and how they are managed. For firms, these requirements reinforce the importance of clearly defined ownership, reliable information and effective oversight. Safeguarding is not simply an accounting exercise. It requires coordination between finance, operations, compliance and senior management. Reconciliations need to be performed appropriately, discrepancies investigated, records maintained and weaknesses escalated. This is creating a stronger case for dedicated safeguarding expertise in firms where the scale, complexity or risk profile justifies it. Some businesses may need a Head of Safeguarding with responsibility for the overall framework. Others may need a compliance leader who understands safeguarding in sufficient depth to oversee the arrangements, challenge weaknesses and work effectively with the finance function. When recruiting for these positions, employers should look beyond job titles. They should ask candidates to explain how they have managed safeguarding processes, prepared for audits, resolved reconciliation problems and improved controls following a review. Practical experience matters. A candidate who has worked through a safeguarding remediation exercise may bring valuable insight that is difficult to assess from a CV alone. Finding the right Head of Compliance and MLRO Two of the most important appointments for a payments business are the Head of Compliance and the Money Laundering Reporting Officer, commonly known as the MLRO. At smaller and early-stage firms, these responsibilities are often combined in one position. That can be a sensible arrangement, provided the individual has sufficient seniority, expertise, time and support to discharge both responsibilities effectively. As the business expands, the workload can become more demanding. Transaction volumes increase, new products are introduced, additional partners are appointed and financial crime risks evolve. A structure that worked for a small start-up may no longer be appropriate for a larger, more complex organisation. An effective Head of Compliance should understand the relevant regulatory requirements, oversee compliance monitoring and maintain an appropriate relationship with the regulator. The role also requires the ability to communicate clearly with the board and translate regulatory expectations into practical actions. The MLRO has a distinct focus on the firm's anti-money laundering arrangements, suspicious activity reporting and wider financial crime framework. The individual needs to understand the firm's risk assessment, customer due diligence, transaction monitoring and escalation procedures. For payments firms, financial crime expertise should extend beyond traditional money laundering risks. Fraud, sanctions exposure, money mule activity and the misuse of payment services all require careful consideration. Employers should also assess whether candidates have experience relevant to their particular operating model. A professional who has worked at a traditional bank may have strong technical knowledge, but experience at a payment institution, EMI or card programme manager may be more directly applicable to a fast-moving payments business. The objective is not simply to recruit somebody who knows the rules. It is to find somebody who can apply them effectively within the organisation. Understanding the difference between payments regulation and SM&CR Another important recruitment consideration is the regulatory structure under which the business operates. Payment institutions and electronic money institutions authorised solely under the Payment Services Regulations 2017 or the Electronic Money Regulations 2011 generally sit outside the Senior Managers and Certification Regime. Their compliance and MLRO arrangements therefore do not automatically map onto the SMF16 and SMF17 designations used by firms within SM&CR. However, where a payments business or its group also operates an entity with relevant FSMA permissions, the position can become more complicated. For example, a group might combine an EMI with a lending business or an investment-related entity. In these circumstances, the responsibilities and approval requirements applicable to each legal entity need to be considered carefully. This matters when recruiting because candidates must understand the actual regulatory responsibilities attached to the role, rather than relying on familiar job titles. Someone who has operated successfully as an SMF16 or SMF17 in an investment firm may bring valuable governance experience, but they still need to demonstrate an understanding of the payments environment. Equally, a payments compliance specialist may need additional experience if the role includes responsibilities within an SM&CR-regulated entity. A good recruitment process examines these differences at the outset, helping the employer identify the experience genuinely required for the appointment. Financial crime, fraud and operational expertise Financial crime controls are another major consideration for payment institutions. A strong compliance or MLRO candidate should be able to discuss how customer risk assessments are developed, how transaction monitoring is calibrated, how sanctions screening operates and how suspicious activity is escalated. They should also understand the practical challenges of operating these controls at scale. For example, a monitoring system that generates excessive false positives can overwhelm an investigations team and make it harder to identify genuine concerns. Conversely, poorly designed controls can fail to identify suspicious activity that should have been investigated. The challenge is to build a system that is proportionate to the firm's risks while remaining effective as its customer base, products and transaction volumes change. Experience working with technology teams can therefore be particularly valuable. Compliance professionals increasingly need to understand data, systems and operational workflows, and to explain the controls required in a way that product managers and engineers can implement. Partner oversight is equally important. Embedded payments, banking-as-a-service arrangements and card programmes may involve agents, distributors, sponsor banks and other third parties. The compliance function needs to understand these relationships, establish appropriate oversight and ensure that responsibilities are clear. When interviewing candidates, employers should ask for specific examples of controls they have designed, weaknesses they have identified and improvements they have implemented. This provides a more