Britain’s financial regulator opened the door to a fully regulated crypto market on Tuesday. The Financial Conduct Authority began accepting authorisation applications from cryptoasset firms, starting a five-month window that closes on February 28, 2027. Any firm that wants to keep serving UK customers after the new regime takes effect on October 25, 2027 has to be in it.
The gateway is the practical start of a rulebook years in the making. Parliament made the Financial Services and Markets Act 2000 (Cryptoassets) Regulations 2026 on February 4, bringing crypto firms inside the FCA’s perimeter for the first time. The regulator published its final rules and guidance on June 30, then followed in September with perimeter guidance, numbered PS26/18, setting out which activities need authorisation.
The regime covers issuing qualifying stablecoins, operating cryptoasset trading platforms, dealing and arranging deals, safeguarding customer holdings and arranging staking. Standards cover consumer protection, market integrity, financial resilience and the safekeeping of client assets. Existing registrations under the anti-money-laundering regime do not convert automatically, so even long-established firms have to apply fresh.
Dominic Cashman, the FCA’s director of authorisation, said firms can now apply and start preparing for regulation. “The UK’s new crypto regime will give consumers greater protections and firms a clear framework to operate in,” he said in the agency’s announcement.
The FCA positioned the opening as a landmark moment. “For the first time, crypto firms operating in the UK will be brought into full FCA regulation,” the agency said, with clear standards covering consumer protection, safeguarding, market integrity and financial resilience.
Not automatic, and not cheap
Approval is not automatic. The FCA said it will authorise a firm only where it meets minimum standards and believes it will keep meeting them. Firms that fall short will not be allowed into the market. The regulator is offering pre-application support meetings and webinars, and plans a consultation in October on targeted updates to its guidance.
Applications run through the FCA’s Connect system. Firms are being told to read the perimeter guidance first to work out whether they need authorisation or a variation of existing permissions. PS26/18 gives worked examples of where activities sit inside or outside the perimeter, including edge cases such as decentralised protocols with a UK-facing interface.
More than 60 companies already registered under the FCA’s anti-money-laundering rules may have a head start on the licensing requirements, as CoinDesk reported when the window opened. Even so, compliance teams face months of work on capital, safeguarding and governance documentation before the February deadline.
In a statement quoted by The Block, FCA official Banymandhub said a well-run, proportionate authorisation process would be important to maintaining the UK’s competitiveness and building a trusted market for digital assets.
What firms have to show
The authorisation bar mirrors what the FCA asks of traditional financial firms. Applicants must demonstrate adequate financial resources, systems for safeguarding client cryptoassets, arrangements to prevent and detect financial crime, and governance with accountable individuals in key roles. Senior managers will hold specific responsibilities under the regulator’s accountability regime, much as they do at banks.
Safeguarding is likely to be the most contentious area. The June rules require firms to keep customer assets separate from proprietary holdings, with record-keeping clear enough that clients can be made whole if the firm fails. Exchanges that commingle operational and customer wallets will need to restructure custody before they can pass review. Market abuse rules will also apply, extending surveillance and reporting duties to crypto trading venues for the first time.
Stablecoin issuers face their own tests. Issuing qualifying stablecoins becomes a regulated activity, with requirements on reserve quality, redemption rights and disclosure. The FCA has said it will consult in October on targeted updates to guidance in light of recent legal changes, and issuers are watching how those proposals line up with the Federal Reserve’s proposed stablecoin rules published in the United States on September 24.
Cost is another factor. Legal advisers in London estimate a full authorisation application can run to six figures in external fees alone once legal, audit and consulting work is counted. Smaller firms are weighing whether the UK market justifies the spend, and some are expected to restrict UK access rather than apply.
Running alongside MiCA
The timing puts the UK on a collision course of sorts with the European Union, whose MiCA framework is already in force and under review. ESMA, the EU’s markets regulator, filed its response to the MiCA review this week asking for new rules on DeFi gateways, staking and influencer marketing. Both blocs are now competing to set the terms for crypto businesses serving European customers, and several global exchanges have signalled they will seek authorisation in both jurisdictions.
Industry groups have warned the February deadline is tight. Firms that apply during the period can keep operating under transitional arrangements while the FCA assesses them; those that miss it face a gap in permission when the regime goes live. The FCA expects to determine applications submitted during the window before the regime takes effect.
After October 25, 2027, cryptoasset businesses will need to be authorised by the FCA to do business in the UK. For consumers, the change means crypto firms will for the first time be held to conduct standards similar in shape to those applying to banks and brokers. For the industry, the next five months decide which companies get to keep the UK in their licensed footprint, and which exit the market rather than pay for compliance.