The verdict in three sentences
For a microfinance institution or community lender in London, a website rebuild focused on trust and loan applications costs between 25,000 and 60,000 GBP (about 29,000 to 70,000 EUR) over 9 weeks. Security is not optional: CSP headers, a web application firewall (WAF) and strict HTTPS protect the brand against phishing and defacement. The loan calculator is what turns an institutional site into a measurable acquisition channel.
Content that builds trust and generates applications
A microfinance client wants to know three things before applying: whether the lender is authorised, how much they will repay each month, and how to get help. The site must display the FCA firm reference number, representative APR, savings and loan products, complaints procedure and Financial Ombudsman details, then capture a qualified application with amount, term, purpose and preferred contact.
| Module | Trust | Acquisition | Group |
|---|---|---|---|
| Institutional pages (authorisation, governance, reports) | 12 pages | 20 pages | 30 pages + investor area |
| Loan calculator | No | Repayments and representative APR | Per product, with eligibility check |
| Application form | Simple | Qualified, routed to the right team | Uploads, SMS tracking |
| Branch and partner locator | List | Map, opening hours, directions | Map + partner community hubs |
| Languages | English | English + 1 community language | English + 3 community languages |
| Indicative 2026 budget | 25,000 GBP | 40,000 GBP | 60,000 GBP |
The calculator must display a representative APR in line with the FCA's financial promotion rules and Consumer Duty, and state that the result is illustrative. Applications are routed to the right underwriting team with an alert to the loan officer.
Security: minimum requirements in 2026
A financial institution's website is a target: clone sites imitating the brand, code injection, form hijacking. The measures below are now the standard expected by auditors, funders and the FCA's operational resilience expectations.
| Measure | Purpose | Indicative 2026 cost |
|---|---|---|
| HTTPS + HSTS | Encryption, HTTP forbidden | Included (DV or OV certificate) |
| CSP and X-Frame-Options headers | Block script injection and clickjacking | Included in the build |
| Web application firewall (WAF) | Filters attacks and bots | 20 to 200 GBP/month |
| Form spam protection | Stops fake applications | Included |
| Pre-launch penetration test | Light CREST-style test | 3,000 to 8,000 GBP |
| Lookalike domain monitoring | Detects phishing sites | 50 to 100 GBP/month |
| Encrypted daily backups | Restore within 4 h | 40 to 80 GBP/month |
The public site must never connect directly to the core banking system. Applications go to a separate database with restricted access and logging, which limits the impact of any incident and supports UK GDPR obligations.
9-week plan
Weeks 1 and 2: scoping with leadership, compliance and marketing, product inventory. Weeks 3 and 4: mock-ups and copy, compliance sign-off on financial promotions. Weeks 5 to 7: build, calculator, locator. Week 8: penetration test and fixes. Week 9: staff training and launch.
Mini case study
Need a professional website?
Kolonell builds websites that attract clients, optimized for the Sénégalese market. Free quote in 2 minutes.
David, CEO of a community lender with 12 partner hubs and 60,000 clients across London, chooses the Acquisition package at 40,000 GBP. The site receives 9,000 visits a month; with a 1.2 % conversion rate on the calculator, it generates 108 qualified applications. If 30 % lead to an average loan of 2,500 GBP, that is 32 loans a month. With a net interest margin of about 8 % over the term, each loan yields around 200 GBP, i.e. 6,400 GBP a month. Even crediting the site with only a quarter of these loans, the investment is covered in about two years, and faster once paid search is pointed at the calculator.
FAQ
How much does a microfinance website cost in London?
Between 25,000 and 60,000 GBP in 2026 depending on the calculator, languages and investor area. A penetration test adds 3,000 to 8,000 GBP.
Is the loan calculator compliant with FCA rules?
It must show a representative APR and state that results are illustrative. Your compliance team signs off the financial promotion before launch.
Should the site connect to the core banking system?
No, it is actually discouraged. Applications are stored in a separate database and processed within 24 to 48 h.
How can we fight clone sites imitating our brand?
With lookalike domain monitoring at 50 to 100 GBP a month and regular messages to clients through official channels.
What is the delivery time?
Nine weeks, including a full week dedicated to security testing and fixes before launch.
Let's scope your project. Share your products, number of locations and compliance requirements, and we will price a rebuild between 25,000 and 60,000 GBP, security included, delivered in 9 weeks. Detailed quote within 48 h. WhatsApp +221 77 596 93 33.
Mohamed Bah
Fondateur, Kolonell
Passionate about digital and entrepreneurship in Africa, Mohamed has been helping Sénégalese businesses with their digital transformation since 2020. Founder of Kolonell, he believes every SME deserves a professional and accessible online présence.
