E-Money Safeguarding and Client Money Protection Explained

The principle: e-money is a liability, safeguarding is its cover

When a customer pays an EMI, the firm issues electronic money and incurs a redemption liability. Safeguarding exists so that this liability is covered by identifiable assets held outside the firm's general estate, and so that customers are paid ahead of general creditors if the firm fails.

Every operational requirement follows from that. Segregation exists so the funds are identifiable. Daily reconciliation exists so cover is confirmed continuously rather than assumed. The resolution pack exists so an insolvency practitioner can act quickly. Records exist so entitlements can be attributed to individual customers.

Firms that internalise the principle build better controls than firms that work from a checklist, because the principle answers the edge cases that the checklist does not anticipate.

Segregation versus insurance or guarantee

The segregation method requires relevant funds to be placed in a separate account with an authorised credit institution or the Bank of England, or invested in secure liquid assets held with an authorised custodian. The account must be designated to show it holds safeguarded funds, and the institution must acknowledge that the firm has no beneficial interest and that no right of set-off applies against the firm's other liabilities.

The insurance method requires a policy or comparable guarantee from an authorised insurer or credit institution, unconnected to the firm, with proceeds payable into a segregated account on the firm's insolvency and cover matching the amount that would otherwise be segregated.

In practice the overwhelming majority of UK EMIs use segregation. Insurance is difficult to place at commercially viable pricing for the amounts involved, and supervisory scrutiny of the policy terms, particularly exclusions and the payment trigger, is intense. Firms using the insurance method should expect to evidence the adequacy of cover on the same daily cycle as a segregating firm evidences its balances.

The D+1 deadline and where firms fall down

Relevant funds must reach the safeguarding account promptly and, at the latest, by the close of the business day following the day of receipt. This is the requirement most frequently breached, and the breaches are almost always structural rather than deliberate.

The common pattern is receipt into an operational collection account, followed by a sweep. Where the sweep runs on a schedule that assumes same-day settlement, any settlement delay pushes the transfer beyond the deadline. Where the sweep is manual, a public holiday or a staff absence produces the same outcome.

The control is not a better sweep schedule. It is monitoring the age of every unsegregated receipt continuously and escalating before the deadline rather than reporting the breach after it. A platform that only reconciles the safeguarding balance will report the breach; a platform that tracks receipt ageing prevents it.

Cross-border corridors compound this. Where funds pass through a correspondent, the receipt date recorded by the firm and the date funds became available can differ, and the deadline runs from receipt.

Reconciling outstanding e-money against safeguarded funds

The internal reconciliation compares total outstanding e-money, being the sum of customer balances plus any amounts received and not yet converted, against the firm's recorded safeguarding obligation. The external reconciliation compares that obligation against confirmed balances at every safeguarding institution and third party.

Both are daily obligations for any firm with meaningful flow. Any shortfall is funded immediately from the firm's own resources; any excess is withdrawn so that firm money does not sit commingled with relevant funds.

The subtlety specific to e-money is unredeemed and dormant balances. E-money remains a liability until redeemed, and balances that have been inactive for years remain outstanding e-money requiring cover. Firms that write dormant balances to income without a proper legal basis create a safeguarding shortfall that persists until corrected.

How Safeheld covers e-money safeguarding

Safeheld tracks outstanding e-money and the corresponding safeguarding cover continuously, reconciling internally and externally across every safeguarding account, acquirer, agent, and distributor in the population.

Receipt ageing is monitored against the D+1 deadline so that an unsegregated receipt escalates before the deadline rather than being reported as a breach afterwards. Shortfalls and excesses are recorded as attributable events linked to the run that identified them.

Runs are sealed with a SHA-256 Merkle root and are independently verifiable. Monthly FCA returns, resolution packs, board reporting, and audit evidence all generate from those sealed runs.

Frequently asked questions

When must e-money safeguarding funds be segregated?

Promptly, and at the latest by the close of the business day following the day on which the funds were received, unless the firm relies on a permitted insurance or guarantee method instead.

Do dormant e-money balances still need safeguarding cover?

Yes. Electronic money remains a redemption liability until it is redeemed, so inactive customer balances continue to require cover. Writing them to income without a proper legal basis creates a safeguarding shortfall.

Is the insurance method a practical alternative to segregation?

It is permitted but uncommon in the UK. Placing cover at viable pricing is difficult at scale, and supervisors examine exclusions and payment triggers closely. Firms using it must evidence the adequacy of cover on the same daily cycle that a segregating firm evidences balances.