The FCA can reprimand and fine firms for failure to meet its regulatory standards and requirements.
It can remove permissions to undertake certain activities and require firms to take specified action. The ultimate sanction is to remove a firm's permissions entirely, meaning it cannot remain in the business of conducting regulated activities (but a motor dealer could, for example, still sell a car but not introduce customers to a finance provider).
