UK FCA releases final crypto authorization guidance

TLDR

The UK Financial Conduct Authority has released its final guidance on which crypto activities must be authorized, setting the rules that will apply from late 2027.

1. The FCAs policy statement PS26/18 defines in-scope activities like trading platforms, stablecoin issuance, custody and staking, under a regime starting 25 October 2027.
2. Crypto firms, including many overseas businesses serving UK retail customers, must apply for FCA authorization between 30 September 2026 and 28 February 2027 to keep operating smoothly.
3. DeFi projects and technology providers face case-by-case scrutiny, and further consultations and tight bank payment policies will shape how usable this new regime feels in practice.

Deep Dive

1. What The FCA Has Finalized

The FCAs policy statement PS26/18 sets out which crypto activities fall under the UKs upcoming cryptoasset regime, built on the Financial Services and Markets Act 2000 (Cryptoassets) Regulations 2026 approved in February. This includes issuing qualifying stablecoins, running trading venues, dealing and arranging deals, safeguarding customer cryptoassets, and providing staking services, all needing explicit authorization to serve UK users, as summarized in the FCA-focused guidance overview.

The authorization gateway opens on 30 September 2026 and runs until 28 February 2027, with the full regime taking effect on 25 October 2027, according to detailed timelines in recent coverage of the regime.

2. Who Is In Scope And What Changes

Current UK registrations under Money Laundering Regulations will not automatically convert into full authorization, and firms are warned not to assume existing permissions are enough under the new rules. The guidance stresses that crypto businesses, e-money issuers and traditional finance firms experimenting with crypto should seek legal advice on exactly which permissions they need, as highlighted in the FCAs final guidance summary.

Parliament has also extended the regime beyond UK-based entities. Overseas firms that deal with, arrange for, or safeguard cryptoassets for UK retail consumers are treated as carrying on business in the UK, with the usual overseas persons exclusion unavailable for these activities, per the analysis of territorial scope. Institutional-only overseas business and firms reaching UK users only via a UK-authorized intermediary are largely carved out.

3. DeFi, Banks And What To Watch Next

The FCA intends the regime to apply to decentralized finance where there is an identifiable controlling entity, such as foundations, core development teams, large governance holders, or front-end operators that materially control a protocol, though this concept remains intentionally vague and assessed case by case in the DeFi perimeter discussion.

An additional consultation in October will cover stablecoins, proprietary trading, some technology providers, decentralized protocols, and financial promotions, which could refine how harsh or flexible the perimeter feels for innovators. At the same time, UK banks continue to block or cap many payments to crypto exchanges, with about 40% of bank-to-exchange transfers reportedly restricted, and these banking controls are not automatically lifted by FCA authorization under the banking access review.

Conclusion

The FCAs final crypto authorization guidance turns the UKs multi-year policy debate into a concrete licensing path that will govern trading platforms, stablecoins, custody and staking from 2027 onward. It should make the UK more attractive to well-capitalized, compliance-focused firms, while raising the bar for lightly structured DeFi projects and overseas platforms that rely on direct UK retail access. Over the next year, the key signals will be which firms apply early, how the October consultations treat DeFi and tech providers, and whether UK banks ease payment limits once fully authorized crypto businesses are in place.