← BACK TO DISCUSSIONS
Financial Services Licensing & ComplianceLEGAL ANALYSIS

How should an intermediary respond to an SECP licensing deficiency letter?

An SECP licensing deficiency letter should be answered through a focused, evidence-supported response addressing every numbered observation against the operative licensing requirements. The purpose is to demonstrate actual compliance or present a lawful corrective proposal, not to overwhelm the regulator with generic assurances. A deficiency can concern a director's education, chief executive's experience, capital, corporate records, beneficial ownership or compliance systems. The appropriate response depends on the precise regulation and supporting documents.

Read the notice as a legal instrument

Identify the file number, issuing department, application, date, requested material and deadline. Determine whether the communication is an information request, a formal show-cause notice or a preliminary observation. Those procedural stages can have different consequences. A licensing applicant should not assume the notice is a final refusal, nor ignore a mandatory response period because the regulator has not yet issued an adverse order.

Create a para-wise matrix

List each observation, relevant rule, supporting evidence and proposed corrective action. This helps avoid omitting a small but consequential request. The response should quote or summarise the actual requirement precisely and then state how the applicant satisfies it. Repeating "the company is fully compliant" after every paragraph provides little assistance if the regulator asked for different documents.

Identify the current regulation

Licensing provisions change through amendments and schedules. For futures brokers, the 2018 Regulations were updated through December 2025; NBFC regulations were updated in January 2026. A response should cite the version applicable to the application rather than rely on an outdated consultant template. The applicant should distinguish an express legal condition from a regulator's request for explanatory information.

Directors' qualifications

Where SECP asks for educational certificates or experience, obtain authentic documents and clearly identify which candidate meets which clause. A regulatory schedule may specify how many directors must satisfy a particular condition. The company should not assume every candidate must hold the same credential or argue that an unrelated professional qualification automatically meets the rule. Provide a concise regulatory mapping and copies of relevant certificates.

Chief executive experience

A CEO-specific management experience requirement should be addressed with a chronological career record, actual responsibilities and credible supporting evidence. A résumé stating an impressive title without dates may be insufficient. An applicant should distinguish senior management from junior employment and explain relevant gaps truthfully. A company should not backdate letters or rename previous positions to manufacture the threshold.

Compliance officer observations

If the regulator questions whether a director may also act as compliance officer, identify the actual rule and any independence or staffing requirement. The response should state duties, reporting line, qualification and any compensating controls. Where separate appointment is mandatory, a new qualified individual may be needed. The company's preference to minimise payroll is not a legal defence to a binding condition.

Capital and shareholding

Provide accurate paid-up capital, bank evidence, statutory filings and ownership information as requested. Do not present projected investments as funds already received. If capital was recently increased, reconcile the board resolution, allotment, register of members and SECP filings. A mismatch among documents can create concerns beyond the monetary shortfall, including reliability of the application's governance record.

Corporate group disclosures

The regulator may request information concerning related companies, other directorships, beneficial ownership or previous unlicensed activity. The answer should identify actual relationships and dates. An applicant may need to undertake to stop a conflicting activity. Such an undertaking should be realistic and actually implemented. Concealing an associated entity may undermine integrity even where the relationship would not itself have been disqualifying.

Undertakings and commitments

A statement that the company "undertakes to comply" cannot substitute for evidence that an immediately mandatory condition is satisfied. Nevertheless, a lawful undertaking can support an application where the rules permit a step to be completed before commencement. The undertaking should identify what will be done, who is responsible and by what legally relevant stage. Do not promise completion of an activity that the company lacks power or resources to undertake.

Documentary authenticity

Annexures should be legible, dated and consistent. Mark each attachment against the relevant observation. Documents produced overseas may require translation, authentication or verification under the applicable process. A forged or misleading document can have far more serious consequences than a disclosed remediable deficiency. Every proposed director and officer should personally verify declarations before the company files them.

Response deadline and extension

Calculate the deadline from the notice and any applicable statutory rules. If additional evidence cannot reasonably be obtained in time, request an extension through the authorised channel before expiry, explaining what is outstanding. Do not assume a casual phone call grants extra time. File available compliant material promptly while making clear any separate request and its status.

A disagreement with SECP

Where the regulator appears to rely on an incorrect interpretation, respond respectfully with the actual statutory provision and relevant facts. Distinguish a genuine question of legal interpretation from a plainly unmet requirement. Avoid threats of constitutional litigation in place of a substantive response. If an appealable adverse order is eventually issued, review the statute for the appropriate challenge route.

A futures broker example

SECP observes that the proposed CEO lacks four years of qualifying senior management experience and that two directors have not established the prescribed educational background. The company should address these separately, identify the precise criteria and provide dated employment records and qualifications. If the CEO does not qualify, changing the nominee may be necessary. A lengthy general description of the proposed business cannot cure personal eligibility.

A fintech example

An applicant for regulated financial activity receives questions about its cybersecurity, beneficial owners and complaint framework. It should provide system architecture, ownership verification and actual policy implementation evidence, not marketing screenshots. If a pilot is proposed, distinguish testing from lawful commercial operation and do not claim a pending application is an authorisation.

Internal legal review

Before submission, compare every statement against company registers, financial accounts and previous regulatory correspondence. Inconsistencies should be corrected and explained rather than hidden. The company should also ensure that responses are authorised by management and signed where required. A legally careful answer can reduce repeated observations even when some substantive changes remain necessary.

Follow-up after filing

Retain the official submission receipt and complete copy. Keep a tracking table for any further observations and any commitments that must be completed before approval. Do not begin regulated activities while the licence remains ungranted. A regulator's silence after receiving a response should not be portrayed as deemed approval unless the applicable law expressly provides such effect.

Opinion and recommended course

A licensing deficiency response should be precise, candid and supported by clause-specific documents. Answer each observation individually, cure genuine deficiencies, explain lawful interpretations and preserve deadlines. The firm's credibility is often strengthened more by an accurate corrective action than by repetitive assertions of compliance.

Principal authorities: The relevant SECP licensing Act and current regulations, including Futures Brokers (Licensing and Operations) Regulations, 2018 as amended; NBFC Regulations, 2008; Companies Act, 2017; SECP AML/CFT/CPF Regulations, 2020 as applicable.

LEGISLATION, SOURCES & CASE LAW

SECP — company incorporation and regulation ↗

Consult the current enactment and any subsequent amendments and reported judgments for the relevant jurisdiction.
Useful? Join the discussionLegal information, not client-specific advice

Discussion

Start a thoughtful discussion. Published comments are reviewed by our editorial team.

Comments are submitted privately and held for moderation before they become visible.