UK regulator sets new crypto authorization rules

TLDR

The UKs Financial Conduct Authority (FCA) has set a new, full authorization regime for crypto businesses that will apply from October 2027.

1. The FCAs guidance defines which crypto activities need authorization, with applications opening 30 Sep 2026 and a key deadline on 28 Feb 2027.
2. Exchanges, custodians, stablecoin issuers, staking providers and many overseas firms serving UK retail users must reassess permissions, as simple AML registration will no longer be enough.
3. Firms and users should watch upcoming FCA consultations, bank payment policies and the 2027 go live date, which will determine which platforms can legally serve UK retail customers.

Deep Dive

1. What The New Rules Actually Cover

The FCA has released final guidance setting out when crypto activities require authorization under the UKs incoming regime, built on the Financial Services and Markets Act 2000 (Cryptoassets) Regulations 2026. Covered activities include issuing qualifying stablecoins, operating trading platforms, dealing and arranging transactions, safeguarding cryptoassets and arranging staking services, helping firms work out if they sit inside the regulatory perimeter and what permissions they need under the new framework.

Applications for authorization are due to open on 30 Sep 2026, with a 28 Feb 2027 deadline for firms that want transitional arrangements, ahead of the regime taking effect on 25 Oct 2027, according to FCA-focused coverage on CoinsKid and other outlets. Firms that miss the February date can still apply later, but may lose the ability to keep regulated activities running while the FCA reviews their case.

2. Who Must Apply And What Changes For Firms

The guidance makes clear that existing registrations and permissions will not automatically convert into authorizations. Firms registered only under UK anti-money-laundering rules, and even traditional finance firms experimenting with crypto, must decide whether they need new authorization or a variation of permission under the new crypto regime.

Territorial scope is broad. Parliament removed the usual overseas persons exclusion for key retail-facing crypto activities, so overseas platforms that deal with, arrange for or safeguard cryptoassets for UK retail customers are treated as doing business in the UK and are expected to come onshore and seek FCA approval. The regime also reaches into decentralized finance wherever an identifiable controlling entity exists, with the FCA planning case by case assessments of who is actually in charge.

3. What To Watch Next

The FCA will run pre-application meetings and webinars to help firms understand prudential requirements, custody rules, market conduct and consumer protection before the authorization gateway opens. Further consultations are due in October on topics such as UK qualifying stablecoins, proprietary trading, certain technology providers, decentralized protocols and financial promotions.

Separately, UK banks currently maintain tight limits or blocks on payments to crypto exchanges, and FCA authorization does not automatically force banks to lift those controls, as recent UK banking coverage notes. Parliament is already probing whether banking restrictions remain justified once a fully licensed crypto regime is in place, so access to payment rails is a key risk variable.

Conclusion

The UK is moving from a narrow AML registration model to a full, statute based authorization regime for crypto, pulling exchanges, custodians, stablecoin issuers, staking providers and many overseas platforms into FCA oversight. For crypto users, this should eventually mean clearer distinctions between regulated and unregulated services. For firms, the opportunity is a more predictable environment, but only if they meet demanding standards and navigate deadlines, consultations and bank risk controls over the next few years.